last executing test programs: 1.679161504s ago: executing program 1 (id=3837): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f", 0x0, 0xfffffffd}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200040800b000100"], 0x104}, 0x1, 0xe00}, 0x0) 1.528377317s ago: executing program 1 (id=3841): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xd00, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x5, 0x2, 0x11]}}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 1.288865274s ago: executing program 1 (id=3845): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000001400070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 1.286433288s ago: executing program 4 (id=3847): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) (async) pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) (async) gettid() getuid() (async) getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000500)) (async) getgid() (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) syz_init_net_socket$ax25(0x3, 0x0, 0x7) (async) r2 = accept$phonet_pipe(r1, &(0x7f0000000540), &(0x7f0000000580)=0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000053c0)={'\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @rand_addr=0x4000000}}}}) getpid() (async) getgid() (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a00)) getuid() (async) getgid() (async) getpid() (async) getuid() (async) gettid() (async) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r5}, @nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r2}]}, 0x24}], 0x1}, 0x0) 1.191216958s ago: executing program 0 (id=3849): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)) pipe(&(0x7f0000001480)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0x0, 0x0, &(0x7f0000000700)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r9 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r9, 0x88, 0x64, 0x0, 0x20000000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000480)=0x10) sendto$inet(r3, &(0x7f0000000540)='0', 0x1, 0x0, &(0x7f0000000580)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(r3, &(0x7f0000001800), 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x14, &(0x7f0000000100)={r4}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udplite(0x11, 0x2, 0x88) pipe(&(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00'}) 1.104920638s ago: executing program 1 (id=3850): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000010000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0x0, 0x0, 0x0, 0xff85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.103541506s ago: executing program 4 (id=3851): socket(0x8, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe80000000000000000000003f0c00aa080009003f0c00001400010000000000000000000064"], 0x48}}, 0x0) 1.103325299s ago: executing program 2 (id=3852): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0x8, 0x443, r1}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000200000000000000edf0000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000060b918001000000085100000f9ffffff18000000ffffffff000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ec0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000003c6013800000018490000fcffffff0000000000000000bf91000000000000b7020000010000008500000084000000b70000000000020000000000000000005073e6564ac5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x6, 0x2, 0x0, 0x3}, 0x0) recvfrom$packet(r1, &(0x7f0000000600)=""/160, 0xa0, 0x40001003, &(0x7f00000003c0)={0x11, 0x8, 0x0, 0x1, 0x40}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00L\x00'], 0x6c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r7, @ANYBLOB="080004000001"], 0x44}}, 0x0) 1.017843572s ago: executing program 1 (id=3853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="11"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x2c}, 0x1, 0x700000000000000}, 0x0) 1.017249055s ago: executing program 3 (id=3854): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfef4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x8, 0x5, [0x5, 0x5, 0x10, 0x30, 0x0]}, &(0x7f0000000040)=0x12) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000180)=0x80000001, 0x4) getsockopt$inet_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x8000}, &(0x7f00000000c0)=0x8) 972.669153ms ago: executing program 4 (id=3855): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r1, 0x0, 0x7}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000500a3d50000000d18116764", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2000) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x26020480) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x1428, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0xfd, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@mh={{0x28}, {"6bbf"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1488) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd7000fcdbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058007d000000000000000c0058005d000000000000000c00580037000000000000000c00580205000000000000000c00580000000000000000000c00580035000000000000005df9fb5ac795d0891ee0b528d698c09a35e3feab6ede1976828c644104593a4ad2e51895cb8e3fe4082f29ef5045ba2935f984a671dead18270dc3fe982f12297325bd52197207908d42c375164f3b5c9cbddc509ddc13ce1d562e09403f4f86f56f779ecdcacc4b81287899e017ef0ef1a600ef1d5b1dc45f75b92f24a1ebcd3a6a6fe0c751ab4c6dd9d07f9a71cb89ddf3ed7f0b"], 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x2404c000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x0, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@empty, 0x4e22, 0x80, 0x0, 0x0, 0x2, 0x80, 0x80, 0x21, r9}, {0x7fffffffffffffff, 0x51c3, 0x200, 0x5, 0x4, 0x0, 0x2, 0x8000000000000000}, {0x1ff, 0x3, 0x3}, 0x6, 0x6e6b9b, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x2, 0x11, 0x40000000, 0x6, 0x7}}, 0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000140)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 893.030064ms ago: executing program 1 (id=3856): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x100000, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000001c0)=0x1004090, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket(0x22, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7050000080000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, r6}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='cpu_frequency_limits\x00', r7}, 0xd) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1c105d4fdd35b4894a01801c3539bb5a83881458210b70f6d850d3ac67052bef6aa2629b5b410e0f9069184ef657bbdf494a07b159363ca1ccc007812894f3c1d62001e17ed341e9eeb1055c20aadab0b1cafe994d1147514ef4354b4f323bb79c9366d1f16c3ed74ba805fafea351d0"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r8, 0x4010744d, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) 837.927897ms ago: executing program 3 (id=3857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000001e00438b0000000000000000000000000000000091859b15f5f288926b000000000000000000002501000000000000000c00150000000000000000001c0017"], 0x68}}, 0x0) 744.788224ms ago: executing program 0 (id=3858): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001480)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000014c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001480)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000014c0)=0x10) r3 = socket(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000180)=0xfffffffe, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="640000001e0021000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000240009000000000000000000000000000000000000000000000000000000400000000000"], 0x64}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="640000001e0021000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000240009000000000000000000000000000000000000000000000000000000400000000000"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x3c}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0), 0x10, 0xc00) (async) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0), 0x10, 0xc00) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x6) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f00000002c0), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000378965484049ffe600000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069105e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069105e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 733.667356ms ago: executing program 2 (id=3859): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000600354236390711012000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 617.696156ms ago: executing program 2 (id=3860): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000440)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x63}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) 560.95282ms ago: executing program 3 (id=3861): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac14142ae0000001000000e837000000000000000000006807"], 0x58}, 0x0) 560.793045ms ago: executing program 0 (id=3862): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000200000aa2c000003"], 0x0) 511.989898ms ago: executing program 4 (id=3863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4d, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000050000000900010073797a30005bc632d850d8b87ddec300000050000000030a010300000000000000000500000008000a400000100314000480080000000000000000000140000000000900030073797a3200000000080005400000"], 0x98}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400018800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) 475.164014ms ago: executing program 2 (id=3864): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001d001b4100000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000000a000100aaaaaaaaaabb0000"], 0x28}}, 0x0) 420.818892ms ago: executing program 3 (id=3865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000100000000008b00000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001680100001800c000700f7ffffff00000000"], 0x34}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x76}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xab}]}, @CTA_NAT_SRC={0xc0, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x2001) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080098"], 0xe0}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 406.525396ms ago: executing program 0 (id=3866): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e80)="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", 0x181}], 0x1}}], 0x2, 0x4048841) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mmc_request_start\x00', r0}, 0x10) 323.940847ms ago: executing program 2 (id=3867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000007f000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000400000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00014000000000000000010c00024000000000efffffff0eeb0340000005f50900010073797a30"], 0xf8}}, 0x0) 323.245627ms ago: executing program 4 (id=3868): socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x33}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000940)={0x1, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x24}]}) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e3a33d5edfe18a2eea41416d149c4514e258f75755a5bbd5b202ab8a7b1e52a704612957661d84ad7576facfa4faf0d91f84b734bc4226d"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013900000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xc5a9, 0x0, r1, 0x8000, '\x00', 0x0, r2, 0x2, 0x5}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000009000000070000000000000e02000000ef69000000000000000f020000009c05000000000000006f00cdda62f84bb584cd8a2f72ecf3b3d47cdb67c576cb98b098fa7ac82da4b2e08de38983f232fb3fff642d455e6e39b201f7943e808dc7d0c522a8861836d53e7dc9990369381d1b8a561dfced9ed4ef714a44c5c47e5428255243d20632251120c9bf63e46ced5ab5245619d07f9d9a3c"], &(0x7f00000005c0)=""/173, 0x3d, 0xad, 0x1}, 0x20) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x11d, 0x73, 0x3, 0x1, r3, 0xadf1, '\x00', 0x0, r2, 0x3, 0x4, 0x2, 0x9}, 0x48) socket$netlink(0x10, 0x3, 0x0) 220.955337ms ago: executing program 0 (id=3869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x361, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 172.88776ms ago: executing program 2 (id=3870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000000000000000000008000f20"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020732500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) recvmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002cc0)=""/152, 0x98}, {&(0x7f0000000340)=""/211, 0xd3}], 0x2}}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}], 0x1}, 0xb177}, {{&(0x7f00000038c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000005200)=""/64, 0x40}, 0xa000000}], 0x4, 0x40002006, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x24, &(0x7f0000000440), &(0x7f0000000100)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a090600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14200}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000adc130000060a0500000000000000000003000009c8130480100001800b00010064796e73657400000c000180080001006f7366002c000180090001006d617371000000001c000280080002400000000f080002400000000908000340000000102c0001800b00010064796e73657400001c000280100007800b0001006c6f6f6b75700000080004400000000f4c0001800b00010072656a65637400003c000280050002000000000008000140ab18621808000140000000010800014000000001080001400000000108000140ece21a630500020005000000041301800e000100696d6d656469617465000000f0120280e41202804000028008000340000000f50900020073797a30000000000800034000000fff08000180fffffffc08000180fffffffd080003400000000908000180000000021800028008000340000000030900020073797a3000000000d2000100de86ea3dff1a457373c8dc9134ab0c94cbc8502aa9c0546bc87550fa75a965469dbb6bc9ec01221bd97fd9c4eb1f77b42ed022b286cf1eabba0a75fec2dacdb72d415a03f9f89a044a95135998bde9ed2dd459e0945acd4cf76791736c103f9d67ba497f013d1735c31a9cb4d849b919b4e4335e7997da05f33e30aacbfd0bdd5fb7a1551ca1300fdff6a06005eb3645fc6f3072be0db44b83c980d984596bc8d37ab1b92a2286e7cd11ff55a02e277e820ced3a37877b7f9323590f20da28d0fab4ec1e0b3c3d682d9faa11101c0000e8000100320af71bde58ce70c5848fa243bf24d9b96dc21b2fbbc26b3a2e35b2bc10537256cfcc5d8bd1f6f8846a716c041141db2565055665d3f20807a305caaf649bdde39a01e79c39428cb3f4a940a7443db6277632e01f4ab5055b498af245a8247da7215b5dec542b1e3b9a2b688ad1254884927fe698463e8db8b9496f4e68723c4b68a44dc5b670c1a707c9d86b5319d3cb23d0c31d87982d4550b6219a1680aea3eed37f62c0d642c24b2150ce4b860497eb91f6b200472049137c9d7966750dc415351529d39fb208567f9b002481ddbe09e809a80b4072097cffb9b17a96ce0591ba5504100100c4e217f070a19f6bcc90f63e6ea6520fff2f1f28389d02ce4c10710293e0194befe7acabe6963c52172d3bdc130b20b1f571e064567786f3aa21fb9159a7bad7b5359273fd9894269c62b3c6401cfb8115b0b599534d19375f4008f7e108682417a604c717b14e17992e62f2f4a13c1ca089c8bf6fd3aa7486cbf73c8b0edd960a0e9df2315ec6ff018a5b8c03e4f9b743774691b3221cd114546fd12e8d24948827f639a6725691dc1816a148a46cb39c94a1bb7ec3941f8e99386e820dd6aa9653dd05df6cb0c50aadfe3b85c1613aff4f21f1fd0cd3b6964c0127fe09fa16caaadfd46a6f055e1980aa3d2c3870f143ad70590416388c56e071397fad82481a6773faf9970b1cc77d6f344d42c96f1579c64a4fea387970c0cf26e839a35eec5ee7c07d553e33dd2b07126398cc4f90eb57dd1da4a4f19e9af7bbb598648c7ac8eb921d809a0cda7832fae6f9d5e155384180ad35200fa630860cd661f623520f65a1b75f89579f8cdfb309f22579c696ca90ab4abb453277873163b926cbbfe349ec9829416c90b586b9a7c53d1249c61ef164872d935d8d5c5185884f6a234889876dd8882228792862da3631295f378b9116890c57797851592dfb9915f344d9de72a639c600aee3ee73de57619ddcfb0183878d0c23f6012959c15c8da28a204639829e539c2f923fb4b6c2448619125111b6d7aaacdf361afed43f39caaf00892dd039085074670966c4fd386ab47df4a99d86df9b293e45770f8eeabfe3c44c4ee7d5ca6f23c01647324d20fc66c55ccd426a734807fea6c46cef4beb910fd9badcae8cfa46a6372dbf1464462b4281602212556272119c7a9cf49ac46c29b2214da0eda09c6ef5b22970f55371389e3fba2ed668108f7293223d14607241b026e89cd2736d549a3c836b1b3d9f489f641f1ceb8d8b46df61629cf347dc3a1b89f8aecaf611549c6d8009641bd9e1ddd48710e8623071096a425a48cf63ffa34365a0a586dc6b45fa6a18399fbc0348b21c1bbf92f7eb6ffd5175626f3bce2c6049878f967e83050e52789f04e81cd4695653b3a80c01c1cdd84b4a6b7c52b8c36748b4c2c2807ebf6b87dbce6b6a7f4cc1f0c8a189e3ea173d6f948b47ba5d615a62908d9964c407d94a8e3ae0d5c259229d6b16704abf1f424918cadb3a30ccd2a084f3f3442bde345d33f95beb14eff269046d6c7f25e4af082ecbba253b196c3fdad3d1a75edf440b09138bb7799c5ac611ad6fc3572f56885c533a31b5f47ded0b016f23f30b5f72ceffb84f5f54cad93b6d6a280a33a010e5e329326520ff2cf663c0862cd93744f22c895ce850aa0855fa7d1d2afd63a45b74807a983c5edeaf7542e37afb90bb20de99f4aaedffabd31d0d0dceff2136d71ce8a99c71f388ab7518b193343b63be288d2c33b48ddde41df3d0088d5ebd9ce78e7089adf2787c2dd06fdbf7fe01aa82f70e6942d0bfc12d141bae7a58817b1fa74add258588f077857757c86e9e0d7187493de4ef6686878ec3be856366ec185b270f45f876399aa9b0fe76e286cf31dc2d4be6a47d4d642a0e43ff1e6e28e2f9e418e428fab978d575e6eae2e872e349aecfd8a04cdb0311171f6d6d2fcaedd8d70560712435346e850b8a7c7684c31997fff85ef136130015e85ffaab5d5f0f91093b0257d48113a256ca4704561025ab938833548e69755d01c9cdd1085f553b7e35f197a9f16972d0536e59f7cdad1eba526a3547c005b5779c39a41c931f4a1b938ad11e4071a849526b3c747764880ebc8edf1636bbf812f5d12eab9a63a9b62c6357d3f5718f3d8997c2d975c86b4510bddbdbac9edada1d5246d10e829b51cee300109d985916199291203723f0fcf940451be862f475a83dd00d4840b4a9876b7ffd040b94d210fe026bd53430916598ab1e469c6a7dd7c12df24c8495f1b32f583f0fe4a9cdae87f93d944c7931dad5f19c425cbf8c235a7774b99ea60f293b31d97568d51ef8b7fb6aabc29b3128fddd3ba67e2da44dd3954060fd4963d298e3e529582bf41dbd2da4b84a2380fca507c54001398705d276d0103661c5ffc80d286011d33c46d4d7e59316cfd7d8fb024518b5c1a226dbcaad31ff631237407636b6e3f8c0d60e07a4d4e27e9ee66dc63f88697cdbea6250209da90100000000000000e8d14a39c45a34f74bf96035b85250139b8da12df23759f061a8a4ef6c501e9018d56ad873256a032d895079b69354aa6759384f69ae09e0bf61f081ebba3399f529b00bfbf99b7474693664509cf0d4132130ce9beaf946bddd83de14d8efb577627bd96cb0e95aeed8c173f085532b9323262f0319e4de2a9eb763c56822bab388fbc267e8fb03dc8bff90c1b96839265b825fa414c5d2d1e0299f3778e4577da487d4a3c61d8d492f074fe6480f379b2b128be50f9e9d6308a8f75e809ab6e72469ee455a19bf0639654ca31039773041aa759ec5be6b1c2f49fd3136b49dc14b1e9c608ec6c9fe5b7128778a36cccb58bb816c67b365ecbaa13d4247532ac04623efb96146493c53dc6277eeb733bfb19e1b4223b06f7681eaf8deaabbc2e3effbfa24c0e477aab413d9362d55d407b50f0ef50645b51ec0142298f705fcf4bac474c4e01392ee7befcf9822762baceafbdeb7965c442aa0cc8e38460d80129cb9f3a710b3658cce9a5fbac177c98f94b5c2aa7b3285acbdbb37ba8e1ead42acb6b8503a3cd4db23dffc7eadca172f5bc5cbd0af29afac63f77e8dc6c4fc0b375984ca7a48f5633779d5be7d144fd45565b4c6ef4bb37efd5e5f8ff52db90549b30cc8795c17ce3ddd9a94a1dc5a430b7fe162fff8c0cf2f75972518790f9629f9a5df4a87599d452c2638d8b5e2420f1fb4ddc08c0f2cd1f4550ea0e262c0e815e82624b2d7e5e95fa90283488cb2c5189abfca98a70e3c1be98ad7ff8b7005857601d6397f474f7ded3ef6607d6509cbc6a856bf478ae2f48a0fed114e95ddc416b2c9e9c453042eda61206181d8de1c1595628ade3bfc6474126ee05efcf624bf39eb8ea83e8bd685e08859a90db3caab2a0101140e30bd07afd8518f9ff96d28e7157e5f0efc3771ca0e3985077bfc20665a1bfc36cba5cbb7b247bf41e067c1c56b249d19e3c8481a7d9bd81e3c06f46fc4c006d3e7168eaead338bb2502ed264b04a398b40714fe5e221c0dc2c79b625ad5886b686a1a302b65c8fe23ecde6ca5e02d44bcebf36508d529f6b18889dbaa51c593ac6e4649e1d2f3386c9e3c27bfa4dd63f3420da9d1dd87d8ed374fbf8c4c215e08ee0be299d3930b11bb45ef4d9899ee17488bffac44f30cc1a7b243bbf4255af904cae23f29421c883a62b546e1fbda2fb0b6b1446b9dda6505f307e662ed67ef5427021b44b21c8fbced677dbabc731185edc62caa29f109b1266e2ea5b042a2983b52f9c4b3d9808aeef6c0f79acc8210af43505ad5945ae08622f2cca9c1f221fcf68d00b2e40ccefc1007aec0a78269a3ded2dddf4aa3cbe1e5722b04e3ee671008e28fead75d72fae0522294cd56e46d04f2577c2206713d94d9635f6f746772bde0390646d93e4caf1628234a995831f50cdce8beba8099d96f30eae38424c4dfd14895dd6c49d5217039b8091b39ca2e1b36d0489ec7daab2c6aeccd39e94afd0cad6dec741df3d7454db9153be28746006f87d3b30fd165dec9958ce560baed873d4e659c5c05a6fc319df9bdbb78587d9d4d730e73883ebe07e4c8e9651190cf6a87ac6bb398555303e14bfde9f45f36a41fde7e1968da00f83b9034c01e9b3625512a59612143d1c69a253a716c1ab9019b04764cf57462b57038fbdab1ae14654423609c5bb2c18f11ea14dfc81f0c951e40d5de185238b582806dd9badabce8bdaeacefcf80ae6caeeda146b5288e8d10b613f835aaf0736387d9275f6a9a1b516bc8e90fbeecbf544f22eb8423a188997df6ab34a240c5eb9004e613ad1988c0f6c5269cf09bb902791008b67cb98eca799ddb90d16d80a6e68a8424a4f143e1f55b7bee25bfc00390c45ee7992f18ab30a40f805ebcddb9217f4612b2bbc96dabb0816c7745fc1e4278e8d5b3b2a133fffe1627a008b1d53a67f3f56a2b70d5ba114aab37e39b6bd80af70ee37e574364d3ab7314a17461fa29f9dc9e22d9af2199b3f8a6629ad642d8c0cfcad0392212c20bb4ed37f7218339f563ab340b1e234ed8f23c665e9faff9b28c0609b23fa92963a43215bee6f14e3be1e353cea1ae0db335860ce528a4065b9fe774d6d9c76fd35dee265eaf4185dc99beed4266a14102eef6928b4ff598787abfc57fafac4c4f1bf28b968156612fd21124646c963cf2bb4c51116d6e09b8c4e67af8c374c2b71c1f1b90acf0d0301198fc946627ec88bbf2f4024dfdcaf799170c6d75f8668910b7890f2f7808471cc7c2356f847ee0be9676d0185289a14b2f8f9478182c5a6adba830ef92773db8a70c587ea049d347a7d9b0caf074221210910bb96471fbe5c7a2c058a5c145f41b80ec33c782d782c8626a899ddcb14fdcfdaaad52216b29c77ff827bbb383ae47082eaece6ec7b2a12ed5e0df4ea25dd148818e2c96c717a0444b1779050b434b60915eab6cc1c8f73606fad4eb328b2887739d1fb7668d368e48756d7424f6d60cc5f1232881172fa4c083d9c2f1f752b07846dcee367741ac02b44bc05a168f251993104897f1dd719d809636393edeb642a532645544e3f1d391db37b48371cf38a770548237ba7bba8e4e378558a0261d4a7a102233ac76678a27252a6233325dd93ed176480d76dd4e52638c6abe506ba3662fa392ff6c52702d489d4e64b8509b3d4ec94af684baa9ffab2daa6235d6d21c7bdaa4b53870a7557498d7036482f114e060119587a6612d04a8df13243c2ce7d703263f961b8c08e3ff63fb966b566de39de27fb38e4a9094994760e84c1eace49677bb62f41048c3440c89421e3b9f6741ff0b4bb023227013eec1a2b3f63246efd66a7ba7f124deb7c0bdf226a536d3a00cffd1548b5e3e33ffd70f3ed8c33edd7e5f16d653bddf269d3b6dce9b85b5e072dda03ba2adfe4c50203154c2cc83ecda178c689ecec2181c929d67e0a2e599eb51c92a77a836d79bf858a8f00743b2706e191b0c041ad13435e28cbe9b8d0f18c627b65d229f9fea37a2d1fa158ded68c393f823bf72359d9f12bcf1e058eaefe400d9c079d60d83c96d7bc56de45ae8569721ab7a2fccc6a6f69bfecea527dda8b7766e724d1dbfd370da7b67adf1179aa4b72e69641170a14893c09bc885a99d1fbe6e05ba2f1ef3901e7382b84e798aa0a310b1de5d4053b956ec58702c4e417c2df4847ad5649d850b82bd8b4d0991db9455e468642f7fadd67b8909d9a848d50535cde61e84ce58af88d6a1fd677cf7f9104ee1ec7af7f5be0d479ae18e9d2507a5a2603cf7e5bcebeb324ccd80b728c7b4b7a94197c0b190002f8e4cd4101e874d7a015d3094063a87980972d0699a4e87fbcd2dada8be59dc28986ad2252e9cf4cf061233f4ae2969acc1f450b4d8ec022d7cb62f0f4135f232bd8fcaea51149e69e8a11443e1c7ff5645adcee1c7a2a5083e597f52f204ec19e02c155411157fe30f786cfcb441161ee0d8c4440041ad93acbf40e2214a195cdde5fe9e77f30981e5dedfc10cfbf9e03f6b7505ff9fdba6a30893c7443b5bc24bf3450e354a92cbef78bf762a8b73683324e176c22383792d41e8c9207620631d9ce291483cb16a8d478753bbcace429c30193e6456400028008000340000000000900020073797a3100000000080003400000000508000180fffffffd08000180000000020900020073797a31000000000900020073797a3000000000080003408000000108000340000000200900020073797a3000000000640001006b9f8fb825ad3e5934da1b349bf1f8d34d200f08b99f079dcd650640402761f87974742efe36071f533a1bbd26ae4f0210f980c4f5aebdfda41d7fbe21c3fdc508a2e7f1d298ab443be5f7972dc931df9aefc0a6d643d2386e6e3c42b6fa74a3080001400000000024000000160a01010000000000000000020000000800074000000000080007400000000038000000180a01040000000000000000050000090900020073797a31000000000c00054000000000000000030900020073797a300000000048000000180a010200000000000000000a000006040003800900010073797a30000000000900020073797a32000000000900020073797a30000000000900020073797a300000000034000000030a010200000000000000000700000408000a40000000020c00024000000000000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0x14dc}, 0x1, 0x0, 0x0, 0x20010}, 0x20000454) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x3a, 0x1, 0x0, 0x52) close(r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000100000000000000000006000000", @ANYRES32=r8, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c000280060011000000000006000f00000000000600100000000000"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x50}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001500000008000300", @ANYRES32=r11, @ANYBLOB="2c002b800800010000000000200003800800"], 0x48}}, 0x0) 166.345744ms ago: executing program 3 (id=3871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x60) 92.849313ms ago: executing program 0 (id=3872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="8c4a658e", @ANYRES32=r2, @ANYBLOB="0000000000100000b7080000489800e47b8af8ff00000000bfa20000000000000702007de97dfcf27772d00008000000b7040000010000008500000082000000496c01000900000018140000719e8d32e44b0b9f1657c8edd4eac992e8f8c455a6ca3e96f54cb3cba00d18b49709081832c280cf70052b778d3f9799204d7cccc3f49f861e25ba5687942e7a8a9bf693e97e8ac992c1f65b9f8e047be064fd02857acdd939920857efd1814574fa35f48e3a28c06e080e46d6a4c816549a37d5839dc1aeeaa1c3d8f6735fbc701761c5bd64c0", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x90) socketpair(0x1, 0xa, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x4, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000000000000000000dfdf1eb3dfae51da264671b21c8aa34141526d470670905103d64787bc0936e4b839060cd434ffa085cb709860b5bee9b892d3dc107629a7647950984f5c6a7b8bd6e6140a71eebd9445da032d2d225991434e1dd8cf099b5", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b6fb8000000000000a200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000280)='syzkaller\x00', 0x8}, 0x90) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket(0x11, 0x80a, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2401050000", @ANYRES32=r8, @ANYBLOB="0c0002800600010000000000"], 0x24}}, 0x0) 85.18384ms ago: executing program 4 (id=3873): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r1, 0x0, 0x7}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000500a3d50000000d18116764", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2000) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x26020480) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x1428, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0xfd, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@mh={{0x28}, {"6bbf"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1488) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd7000fcdbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0058007d000000000000000c0058005d000000000000000c00580037000000000000000c00580205000000000000000c00580000000000000000000c00580035000000000000005df9fb5ac795d0891ee0b528d698c09a35e3feab6ede1976828c644104593a4ad2e51895cb8e3fe4082f29ef5045ba2935f984a671dead18270dc3fe982f12297325bd52197207908d42c375164f3b5c9cbddc509ddc13ce1d562e09403f4f86f56f779ecdcacc4b81287899e017ef0ef1a600ef1d5b1dc45f75b92f24a1ebcd3a6a6fe0c751ab4c6dd9d07f9a71cb89ddf3ed7f0b"], 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x2404c000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x0, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@empty, 0x4e22, 0x80, 0x0, 0x0, 0x2, 0x80, 0x80, 0x21, r9}, {0x7fffffffffffffff, 0x51c3, 0x200, 0x5, 0x4, 0x0, 0x2, 0x8000000000000000}, {0x1ff, 0x3, 0x3}, 0x6, 0x6e6b9b, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x2, 0x11, 0x40000000, 0x6, 0x7}}, 0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000140)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=3874): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnetconf={0x14, 0x18, 0x601}, 0x14}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030102000000fdffffffffffffff100800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f1ba1f848100000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): .0.1604'. [ 170.191373][T10097] bridge4: port 1(bridge_slave_1) entered disabled state [ 170.309921][T10106] bridge0: port 2(vlan3) entered blocking state [ 170.352752][T10106] bridge0: port 2(vlan3) entered disabled state [ 170.381523][T10106] vlan3: entered allmulticast mode [ 170.424279][T10106] vlan3: left allmulticast mode [ 170.475184][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1610'. [ 170.656588][T10126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1616'. [ 170.689466][T10128] netlink: 'syz.4.1617': attribute type 5 has an invalid length. [ 170.720756][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 171.822320][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 172.001633][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'. [ 172.066723][T10218] nbd: couldn't find a device at index 0 [ 172.444942][T10234] netlink: 'syz.3.1658': attribute type 4 has an invalid length. [ 172.483444][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 172.560079][T10244] netlink: 'syz.2.1663': attribute type 2 has an invalid length. [ 172.593357][T10244] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 172.656993][T10249] netlink: 'syz.3.1665': attribute type 4 has an invalid length. [ 172.666017][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 172.862092][T10260] netlink: 'syz.0.1669': attribute type 4 has an invalid length. [ 173.286093][T10289] tipc: Enabling of bearer rejected, failed to enable media [ 173.309105][T10279] xt_addrtype: ipv6 does not support BROADCAST matching [ 173.418240][T10291] bond_slave_0: entered promiscuous mode [ 173.424129][T10291] bond_slave_1: entered promiscuous mode [ 173.435707][T10291] macsec2: entered allmulticast mode [ 173.441277][T10291] bond0: entered allmulticast mode [ 173.446424][T10291] bond_slave_0: entered allmulticast mode [ 173.454462][T10291] bond_slave_1: entered allmulticast mode [ 173.479434][T10291] batadv0: entered allmulticast mode [ 173.493246][T10291] bond0: left allmulticast mode [ 173.503977][T10291] bond_slave_0: left allmulticast mode [ 173.514841][T10291] bond_slave_1: left allmulticast mode [ 173.521019][T10291] batadv0: left allmulticast mode [ 173.526691][T10291] bond_slave_0: left promiscuous mode [ 173.532239][T10291] bond_slave_1: left promiscuous mode [ 173.726737][T10306] SET target dimension over the limit! [ 174.321454][T10342] bond_slave_0: entered promiscuous mode [ 174.327271][T10342] bond_slave_1: entered promiscuous mode [ 174.334994][T10342] macsec1: entered allmulticast mode [ 174.340728][T10342] bond0: entered allmulticast mode [ 174.348581][T10342] bond_slave_0: entered allmulticast mode [ 174.354775][T10342] bond_slave_1: entered allmulticast mode [ 174.369749][T10342] bond0: left allmulticast mode [ 174.374913][T10342] bond_slave_0: left allmulticast mode [ 174.383777][T10342] bond_slave_1: left allmulticast mode [ 174.403274][T10342] bond_slave_0: left promiscuous mode [ 174.408842][T10342] bond_slave_1: left promiscuous mode [ 174.604060][T10359] FAULT_INJECTION: forcing a failure. [ 174.604060][T10359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.663793][T10359] CPU: 1 PID: 10359 Comm: syz.3.1705 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 174.675133][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 174.685318][T10359] Call Trace: [ 174.688623][T10359] [ 174.691557][T10359] dump_stack_lvl+0x241/0x360 [ 174.696258][T10359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.701469][T10359] ? __pfx__printk+0x10/0x10 [ 174.706066][T10359] ? __pfx_lock_release+0x10/0x10 [ 174.711096][T10359] ? __lock_acquire+0x1346/0x1fd0 [ 174.716121][T10359] should_fail_ex+0x3b0/0x4e0 [ 174.720843][T10359] _copy_from_user+0x2f/0xe0 [ 174.725434][T10359] kstrtouint_from_user+0xc6/0x190 [ 174.730766][T10359] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 174.736502][T10359] ? __pfx_lock_acquire+0x10/0x10 [ 174.741539][T10359] proc_fail_nth_write+0xaa/0x2d0 [ 174.746582][T10359] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 174.752768][T10359] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.758781][T10359] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.764448][T10359] vfs_write+0x2a2/0xc90 [ 174.768721][T10359] ? __pfx_vfs_write+0x10/0x10 [ 174.773512][T10359] ? __fget_files+0x29/0x470 [ 174.778122][T10359] ? __fget_files+0x3f6/0x470 [ 174.782833][T10359] ksys_write+0x1a0/0x2c0 [ 174.787177][T10359] ? __pfx_ksys_write+0x10/0x10 [ 174.792034][T10359] ? do_syscall_64+0x100/0x230 [ 174.796955][T10359] ? do_syscall_64+0xb6/0x230 [ 174.801643][T10359] do_syscall_64+0xf3/0x230 [ 174.806154][T10359] ? clear_bhb_loop+0x35/0x90 [ 174.810835][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.816726][T10359] RIP: 0033:0x7f67d1d7475f [ 174.821137][T10359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 174.840841][T10359] RSP: 002b:00007f67d2a71040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 174.849352][T10359] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67d1d7475f [ 174.857319][T10359] RDX: 0000000000000001 RSI: 00007f67d2a710b0 RDI: 0000000000000004 [ 174.865371][T10359] RBP: 00007f67d2a710a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.873335][T10359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 174.881336][T10359] R13: 000000000000000b R14: 00007f67d1f03f60 R15: 00007ffff62abc38 [ 174.889354][T10359] [ 174.918006][T10358] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.168855][T10374] netlink: 'syz.3.1712': attribute type 3 has an invalid length. [ 175.315301][T10382] __nla_validate_parse: 8 callbacks suppressed [ 175.315320][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 175.608879][T10395] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1719'. [ 175.668839][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 175.710617][T10400] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 175.728192][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 176.104267][T10423] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1730'. [ 176.234820][T10415] vlan3: entered promiscuous mode [ 176.258434][T10420] bond_slave_0: entered promiscuous mode [ 176.264331][T10420] bond_slave_1: entered promiscuous mode [ 176.272563][T10420] macsec2: entered allmulticast mode [ 176.278093][T10420] bond0: entered allmulticast mode [ 176.283311][T10420] bond_slave_0: entered allmulticast mode [ 176.290103][T10420] bond_slave_1: entered allmulticast mode [ 176.299857][T10420] bond0: left allmulticast mode [ 176.304829][T10420] bond_slave_0: left allmulticast mode [ 176.311290][T10420] bond_slave_1: left allmulticast mode [ 176.316836][T10420] bond_slave_0: left promiscuous mode [ 176.322363][T10420] bond_slave_1: left promiscuous mode [ 176.397529][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 176.447737][T10423] ipvlan2: entered allmulticast mode [ 176.461756][T10423] veth0_vlan: entered allmulticast mode [ 176.473804][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1732'. [ 176.575212][T10438] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1733'. [ 176.786054][T10451] x_tables: duplicate underflow at hook 1 [ 176.945531][T10457] netlink: 'syz.0.1742': attribute type 4 has an invalid length. [ 176.989452][T10456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.015537][T10459] bridge0: port 4(team0) entered disabled state [ 177.055961][T10459] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 177.130457][T10467] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 177.225996][T10470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1748'. [ 177.279553][T10472] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 177.342294][T10474] IPVS: Unknown mcast interface: vcan0 [ 177.355884][T10477] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1751'. [ 177.503191][T10483] netlink: 'syz.4.1752': attribute type 4 has an invalid length. [ 177.520012][T10483] netlink: 'syz.4.1752': attribute type 4 has an invalid length. [ 177.722205][T10487] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.321412][T10523] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.396059][T10519] bridge_slave_1: left allmulticast mode [ 178.412170][T10519] bridge_slave_1: left promiscuous mode [ 178.429379][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.492621][T10519] bridge3: port 1(bridge_slave_1) entered blocking state [ 178.525502][T10519] bridge3: port 1(bridge_slave_1) entered disabled state [ 178.559233][T10519] bridge_slave_1: entered allmulticast mode [ 178.607744][T10519] bridge_slave_1: entered promiscuous mode [ 178.614395][T10519] bridge3: port 1(bridge_slave_1) entered blocking state [ 178.621613][T10519] bridge3: port 1(bridge_slave_1) entered forwarding state [ 178.938501][T10556] nbd: socks must be embedded in a SOCK_ITEM attr [ 178.994825][T10564] netlink: 'syz.0.1786': attribute type 4 has an invalid length. [ 179.068799][T10569] pim6reg: entered allmulticast mode [ 179.114030][T10570] vxcan1: entered allmulticast mode [ 179.316955][T10584] vlan3: entered allmulticast mode [ 179.348032][T10584] bridge0: port 2(vlan3) entered blocking state [ 179.377510][T10584] bridge0: port 2(vlan3) entered disabled state [ 179.460142][T10580] team1: Mode changed to "activebackup" [ 179.800252][T10609] vlan2: entered promiscuous mode [ 180.108479][T10619] team1: Mode changed to "activebackup" [ 180.453679][T10648] __nla_validate_parse: 22 callbacks suppressed [ 180.453725][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1820'. [ 180.479099][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 180.493689][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 180.536472][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 180.676510][T10671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1828'. [ 180.905317][T10688] tipc: Enabling of bearer rejected, failed to enable media [ 180.934093][T10686] bridge0: entered promiscuous mode [ 180.947904][T10686] vlan3: entered promiscuous mode [ 180.965953][T10686] bridge0: left promiscuous mode [ 181.008583][T10693] tipc: Can't bind to reserved service type 0 [ 181.285855][T10712] netlink: 'syz.0.1836': attribute type 29 has an invalid length. [ 181.310691][T10712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.318474][T10712] IPv6: NLM_F_CREATE should be set when creating new route [ 181.325750][T10712] IPv6: NLM_F_CREATE should be set when creating new route [ 181.353305][ T5092] Bluetooth: hci3: command 0x0406 tx timeout [ 181.353343][ T5107] Bluetooth: hci4: command 0x0405 tx timeout [ 181.359439][ T5092] Bluetooth: hci0: command 0x0406 tx timeout [ 181.443056][T10719] ip6_vti0: entered promiscuous mode [ 181.463883][T10719] vlan2: entered promiscuous mode [ 181.481208][T10719] ip6_vti0: left promiscuous mode [ 181.547419][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 181.991264][T10757] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1847'. [ 182.107042][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'. [ 182.124390][T10759] netlink: 'syz.2.1849': attribute type 5 has an invalid length. [ 182.156988][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'. [ 182.189890][T10767] netlink: 'syz.4.1851': attribute type 4 has an invalid length. [ 182.225401][T10769] ip6_vti0: entered promiscuous mode [ 182.233007][T10765] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1851'. [ 182.256239][T10769] vlan2: entered promiscuous mode [ 182.274487][T10769] ip6_vti0: left promiscuous mode [ 182.507767][T10786] openvswitch: netlink: Key type 9560 is out of range max 32 [ 182.707733][T10802] vlan3: entered promiscuous mode [ 182.878088][T10813] ipvlan3: entered allmulticast mode [ 183.063551][T10824] xt_SECMARK: invalid mode: 0 [ 183.324845][T10848] netlink: 'syz.4.1878': attribute type 3 has an invalid length. [ 183.466496][T10857] netlink: 'syz.2.1882': attribute type 3 has an invalid length. [ 183.493038][T10857] netlink: 'syz.2.1882': attribute type 3 has an invalid length. [ 183.718184][T10873] netlink: 'syz.1.1888': attribute type 1 has an invalid length. [ 184.206383][T10911] netlink: 'syz.2.1903': attribute type 64 has an invalid length. [ 184.288923][T10918] xt_SECMARK: invalid mode: 0 [ 184.731677][T10945] batadv0: Device is already in use. [ 184.747733][T10947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 185.111118][T10967] tipc: Enabling of bearer rejected, failed to enable media [ 185.139569][T10972] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.389834][T10993] netlink: 'syz.2.1937': attribute type 4 has an invalid length. [ 185.545256][T10998] xt_SECMARK: invalid mode: 0 [ 185.559195][T11005] netlink: 'syz.2.1940': attribute type 4 has an invalid length. [ 185.685460][T11011] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.941166][T11022] __nla_validate_parse: 23 callbacks suppressed [ 185.941184][T11022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1947'. [ 185.957686][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 186.373670][T11048] netlink: 'syz.3.1959': attribute type 12 has an invalid length. [ 186.397309][T11048] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1959'. [ 186.425049][T11053] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1961'. [ 186.446165][T11053] netlink: 'syz.1.1961': attribute type 2 has an invalid length. [ 186.467582][T11053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1961'. [ 186.499490][T11048] xt_TCPMSS: Only works on TCP SYN packets [ 186.532594][T11053] vlan3: entered promiscuous mode [ 186.815931][T11076] ip6_vti0: entered promiscuous mode [ 186.822612][T11076] vlan3: entered promiscuous mode [ 186.839565][T11076] ip6_vti0: left promiscuous mode [ 187.017971][T11090] xt_SECMARK: invalid mode: 0 [ 187.127351][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 187.268375][T11109] netlink: 'syz.2.1975': attribute type 4 has an invalid length. [ 187.492732][T11116] netlink: 'syz.3.1977': attribute type 16 has an invalid length. [ 187.529792][T11116] netlink: 'syz.3.1977': attribute type 17 has an invalid length. [ 187.660508][T11124] tipc: Enabling of bearer rejected, failed to enable media [ 188.076641][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 188.095418][T11156] team_slave_0: left promiscuous mode [ 188.105713][T11156] team_slave_0: left allmulticast mode [ 188.152422][T11156] team0: Port device team_slave_0 removed [ 188.159667][T11156] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 188.243910][T11176] xt_SECMARK: invalid mode: 0 [ 188.360795][T11187] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1997'. [ 188.371468][T11187] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 188.940485][T11210] netlink: 'syz.1.2007': attribute type 4 has an invalid length. [ 188.981949][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'. [ 189.326973][T11237] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2018'. [ 189.373202][T11237] ipvlan4: entered allmulticast mode [ 189.451098][T11247] netlink: 'syz.3.2022': attribute type 4 has an invalid length. [ 189.612212][T11265] xt_SECMARK: invalid mode: 0 [ 189.736131][T11272] netlink: 'syz.3.2029': attribute type 4 has an invalid length. [ 190.105261][T11291] warn_alloc: 1 callbacks suppressed [ 190.105281][T11291] syz.3.2036: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 190.146322][T11291] CPU: 1 PID: 11291 Comm: syz.3.2036 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 190.156510][T11291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 190.166559][T11291] Call Trace: [ 190.169830][T11291] [ 190.172756][T11291] dump_stack_lvl+0x241/0x360 [ 190.177435][T11291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.182628][T11291] ? __pfx__printk+0x10/0x10 [ 190.187214][T11291] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 190.193621][T11291] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 190.200144][T11291] warn_alloc+0x278/0x410 [ 190.204491][T11291] ? __pfx_warn_alloc+0x10/0x10 [ 190.209355][T11291] ? packet_set_ring+0x6da/0x2450 [ 190.214478][T11291] ? __get_vm_area_node+0x23d/0x270 [ 190.219705][T11291] __vmalloc_node_range_noprof+0x69f/0x1460 [ 190.225769][T11291] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 190.232174][T11291] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.238668][T11291] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 190.244721][T11291] ? packet_set_ring+0x62b/0x2450 [ 190.249750][T11291] ? rcu_is_watching+0x15/0xb0 [ 190.254512][T11291] ? packet_set_ring+0x6da/0x2450 [ 190.259534][T11291] vzalloc_noprof+0x79/0x90 [ 190.264050][T11291] ? packet_set_ring+0x6da/0x2450 [ 190.269095][T11291] packet_set_ring+0x6da/0x2450 [ 190.273981][T11291] ? __pfx_packet_set_ring+0x10/0x10 [ 190.279285][T11291] ? __might_fault+0xaa/0x120 [ 190.283960][T11291] ? __might_fault+0xc6/0x120 [ 190.288642][T11291] packet_setsockopt+0x1140/0x1970 [ 190.293747][T11291] ? __pfx___might_resched+0x10/0x10 [ 190.299033][T11291] ? __pfx_packet_setsockopt+0x10/0x10 [ 190.304522][T11291] ? aa_sk_perm+0x967/0xab0 [ 190.309059][T11291] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.314003][T11291] ? __pfx_lock_acquire+0x10/0x10 [ 190.319027][T11291] ? aa_sock_opt_perm+0x79/0x120 [ 190.323977][T11291] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 190.329531][T11291] ? security_socket_setsockopt+0x87/0xb0 [ 190.335247][T11291] ? __pfx_packet_setsockopt+0x10/0x10 [ 190.340721][T11291] do_sock_setsockopt+0x3af/0x720 [ 190.345743][T11291] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 190.351281][T11291] ? __fget_files+0x29/0x470 [ 190.355868][T11291] ? __fget_files+0x3f6/0x470 [ 190.360547][T11291] __sys_setsockopt+0x1ae/0x250 [ 190.365396][T11291] __x64_sys_setsockopt+0xb5/0xd0 [ 190.370853][T11291] do_syscall_64+0xf3/0x230 [ 190.375443][T11291] ? clear_bhb_loop+0x35/0x90 [ 190.380134][T11291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.386028][T11291] RIP: 0033:0x7f67d1d75bd9 [ 190.390445][T11291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.410157][T11291] RSP: 002b:00007f67d2a71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.418573][T11291] RAX: ffffffffffffffda RBX: 00007f67d1f03f60 RCX: 00007f67d1d75bd9 [ 190.426541][T11291] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 190.434501][T11291] RBP: 00007f67d1de4aa1 R08: 000000000000001c R09: 0000000000000000 [ 190.442486][T11291] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 190.450458][T11291] R13: 000000000000000b R14: 00007f67d1f03f60 R15: 00007ffff62abc38 [ 190.458437][T11291] [ 190.467287][T11291] Mem-Info: [ 190.470440][T11291] active_anon:3145 inactive_anon:0 isolated_anon:0 [ 190.470440][T11291] active_file:1455 inactive_file:38186 isolated_file:0 [ 190.470440][T11291] unevictable:768 dirty:176 writeback:0 [ 190.470440][T11291] slab_reclaimable:9181 slab_unreclaimable:98860 [ 190.470440][T11291] mapped:13857 shmem:1261 pagetables:650 [ 190.470440][T11291] sec_pagetables:0 bounce:0 [ 190.470440][T11291] kernel_misc_reclaimable:0 [ 190.470440][T11291] free:1403261 free_pcp:961 free_cma:0 [ 190.547721][T11291] Node 0 active_anon:12376kB inactive_anon:0kB active_file:5820kB inactive_file:152668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52460kB dirty:704kB writeback:0kB shmem:3448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10756kB pagetables:2484kB sec_pagetables:0kB all_unreclaimable? no [ 190.635314][T11291] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 190.718708][T11291] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.766436][T11318] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 190.784619][T11291] lowmem_reserve[]: 0 2571 2571 0 0 [ 190.808695][T11291] Node 0 DMA32 free:1652648kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:12628kB inactive_anon:0kB active_file:5820kB inactive_file:152356kB unevictable:1536kB writepending:704kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:2784kB local_pcp:1632kB free_cma:0kB [ 190.859180][T11291] lowmem_reserve[]: 0 0 0 0 0 [ 190.863962][T11291] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.975401][T11291] lowmem_reserve[]: 0 0 0 0 0 [ 190.997264][T11291] Node 1 Normal free:3944788kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:948kB local_pcp:0kB free_cma:0kB [ 190.999799][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 191.067246][T11291] lowmem_reserve[]: 0 0 0 0 0 [ 191.072036][T11291] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.072607][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.109151][T11291] Node 0 DMA32: 138*4kB (ME) 217*8kB (UME) 114*16kB (UME) 100*32kB (UME) 172*64kB (UME) 76*128kB (UME) 23*256kB (UME) 14*512kB (UM) 10*1024kB (UME) 6*2048kB (UME) 388*4096kB (M) = 1652880kB [ 191.129027][T11327] batman_adv: batadv0: Adding interface: macsec1 [ 191.149571][T11327] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.150350][T11291] Node 0 [ 191.184240][T11327] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 191.199345][T11291] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 191.211581][T11291] Node 1 Normal: 5*4kB (U) 4*8kB (UM) 4*16kB (UM) 7*32kB (UM) 4*64kB (U) 2*128kB (U) 2*256kB (UM) 2*512kB (UM) 2*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3944788kB [ 191.267314][T11291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.285433][T11291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.310461][T11291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.329649][T11291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.359173][T11291] 40887 total pagecache pages [ 191.367584][T11291] 0 pages in swap cache [ 191.376108][T11291] Free swap = 124996kB [ 191.383502][T11291] Total swap = 124996kB [ 191.394237][T11291] 2097051 pages RAM [ 191.401974][T11291] 0 pages HighMem/MovableOnly [ 191.406859][T11291] 400871 pages reserved [ 191.416808][T11291] 0 pages cma reserved [ 191.431813][T11354] __nla_validate_parse: 7 callbacks suppressed [ 191.431831][T11354] netlink: 183560 bytes leftover after parsing attributes in process `syz.0.2054'. [ 191.477616][T11354] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 191.546339][T11360] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2058'. [ 191.665869][T11366] netlink: 'syz.1.2059': attribute type 3 has an invalid length. [ 191.772894][T11375] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 191.882687][T11380] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.063990][T11385] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2068'. [ 192.103222][T11387] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2069'. [ 192.174782][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 192.644500][T11420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2081'. [ 192.653689][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 192.851729][T11435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2089'. [ 193.438731][T11469] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.468983][T11470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2098'. [ 193.613963][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 193.655574][T11481] tc_dump_action: action bad kind [ 193.686273][T11481] gtp1: entered promiscuous mode [ 193.693633][T11479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.710929][T11479] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 194.412435][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.423129][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.432371][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.441766][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.451035][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 194.459176][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.491781][T11525] netlink: 'syz.2.2122': attribute type 4 has an invalid length. [ 194.561967][T11528] vlan3: entered promiscuous mode [ 194.603406][T11531] netlink: 'syz.2.2124': attribute type 7 has an invalid length. [ 194.636225][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.818137][T11546] nbd: couldn't find a device at index 0 [ 194.876051][T11519] chnl_net:caif_netlink_parms(): no params data found [ 194.884302][T11545] x_tables: duplicate underflow at hook 3 [ 195.017672][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.035098][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.056345][T11519] bridge_slave_0: entered allmulticast mode [ 195.068912][T11519] bridge_slave_0: entered promiscuous mode [ 195.099854][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.131001][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.147751][T11519] bridge_slave_1: entered allmulticast mode [ 195.154775][T11519] bridge_slave_1: entered promiscuous mode [ 195.193754][T11558] geneve0: entered promiscuous mode [ 195.202118][T11558] geneve0: entered allmulticast mode [ 195.275840][T11519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.296529][T11519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.412475][T11519] team0: Port device team_slave_0 added [ 195.443261][T11568] netlink: 'syz.3.2133': attribute type 4 has an invalid length. [ 195.450338][T11519] team0: Port device team_slave_1 added [ 195.590089][T11570] syz.0.2134 (11570) used greatest stack depth: 18384 bytes left [ 195.590470][T11572] bond_slave_0: entered promiscuous mode [ 195.603753][T11572] bond_slave_1: entered promiscuous mode [ 195.627353][T11572] macsec1: entered allmulticast mode [ 195.647423][T11572] bond0: entered allmulticast mode [ 195.652608][T11572] bond_slave_0: entered allmulticast mode [ 195.697852][T11572] bond_slave_1: entered allmulticast mode [ 195.725371][T11572] bond0: left allmulticast mode [ 195.740943][T11572] bond_slave_0: left allmulticast mode [ 195.746462][T11572] bond_slave_1: left allmulticast mode [ 195.789289][T11572] bond_slave_0: left promiscuous mode [ 195.794807][T11572] bond_slave_1: left promiscuous mode [ 195.847390][T11519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.854377][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.893815][T11519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.921817][T11519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.939063][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.980103][T11519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.072772][T11519] hsr_slave_0: entered promiscuous mode [ 196.080073][T11519] hsr_slave_1: entered promiscuous mode [ 196.095316][T11519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.104125][T11519] Cannot create hsr debugfs directory [ 196.242382][T11598] xt_SECMARK: invalid mode: 0 [ 196.358367][T11519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.372695][T11519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.483708][T11519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.494267][T11519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.558317][ T4491] Bluetooth: hci0: command tx timeout [ 196.662277][T11614] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.664213][T11519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.691097][T11519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.724834][T11618] __nla_validate_parse: 10 callbacks suppressed [ 196.724847][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2151'. [ 196.813444][T11519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.836780][T11519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.869477][T11617] netlink: 'syz.0.2151': attribute type 4 has an invalid length. [ 196.879995][T11623] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2153'. [ 196.912990][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2153'. [ 196.935819][T11623] ipvlan5: entered allmulticast mode [ 196.987379][T11629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2156'. [ 197.101714][T11635] netlink: 'syz.3.2158': attribute type 4 has an invalid length. [ 197.240095][T11519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.276343][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2163'. [ 197.299487][T11519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.333276][T11519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.371161][T11519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.382083][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2164'. [ 197.399428][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 197.578272][T11667] netlink: 'syz.3.2170': attribute type 7 has an invalid length. [ 197.589816][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2169'. [ 197.613164][T11670] netlink: 'syz.0.2171': attribute type 3 has an invalid length. [ 197.634968][T11671] xt_SECMARK: invalid mode: 0 [ 197.644124][T11670] netlink: 'syz.0.2171': attribute type 3 has an invalid length. [ 197.722680][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.757897][T11676] IPVS: Unknown mcast interface: vcan0 [ 197.841222][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.879452][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.886627][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.924365][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.931771][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.130733][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2180'. [ 198.151849][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 198.359335][T11709] netlink: 'syz.4.2184': attribute type 2 has an invalid length. [ 198.431723][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.460284][T11714] netlink: 'syz.2.2187': attribute type 64 has an invalid length. [ 198.615807][T11519] veth0_vlan: entered promiscuous mode [ 198.627656][ T4491] Bluetooth: hci0: command tx timeout [ 198.676472][T11519] veth1_vlan: entered promiscuous mode [ 198.793324][T11519] veth0_macvtap: entered promiscuous mode [ 198.823708][T11519] veth1_macvtap: entered promiscuous mode [ 198.911213][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.930614][T11742] xt_SECMARK: invalid mode: 0 [ 198.936752][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.953705][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.968458][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.984657][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.998333][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.018661][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.037272][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.058439][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.079034][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.093414][T11519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.123835][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.149396][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.173943][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.195537][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.206255][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.219219][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.231792][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.243075][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.257940][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.276961][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.290718][T11519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.312478][T11519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.331863][T11519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.359720][T11519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.380387][T11519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.402809][T11767] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 199.605661][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.629770][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.677608][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.707229][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.902011][ T6995] bridge_slave_0: left allmulticast mode [ 199.926486][ T6995] bridge_slave_0: left promiscuous mode [ 199.965865][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.075833][ T6995] veth1_to_bond: left allmulticast mode [ 200.085496][T11797] nbd: socks must be embedded in a SOCK_ITEM attr [ 200.092904][ T6995] veth1_to_bond: left promiscuous mode [ 200.110106][ T6995] bridge1: port 2(veth1_to_bond) entered disabled state [ 200.164998][ T6995] bridge_slave_1: left allmulticast mode [ 200.185678][ T6995] bridge_slave_1: left promiscuous mode [ 200.206278][ T6995] bridge1: port 1(bridge_slave_1) entered disabled state [ 200.272535][T11813] Cannot find add_set index 0 as target [ 200.707388][ T4491] Bluetooth: hci0: command tx timeout [ 200.767055][T11825] xt_SECMARK: invalid mode: 0 [ 201.103361][ T6995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.121849][ T6995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.134590][ T6995] bond0 (unregistering): Released all slaves [ 201.146787][ T6995] bond1 (unregistering): Released all slaves [ 201.161206][ T6995] bond2 (unregistering): Released all slaves [ 201.182053][ T6995] bond3 (unregistering): Released all slaves [ 201.196895][ T6995] bond4 (unregistering): Released all slaves [ 201.479830][T11836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.509415][T11836] validate_nla: 2 callbacks suppressed [ 201.509432][T11836] netlink: 'syz.4.2228': attribute type 10 has an invalid length. [ 201.553951][T11845] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 201.741792][T11859] __nla_validate_parse: 45 callbacks suppressed [ 201.741812][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 202.000441][T11876] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.020847][T11872] veth1: mtu less than device minimum [ 202.035020][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 202.106942][ T6995] hsr_slave_0: left promiscuous mode [ 202.146243][ T6995] hsr_slave_1: left promiscuous mode [ 202.183268][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.185250][T11884] xt_SECMARK: invalid mode: 0 [ 202.216978][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.252144][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.272625][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.285164][ T6995] batman_adv: batadv0: Removing interface: macsec1 [ 202.318541][ T6995] veth1_macvtap: left promiscuous mode [ 202.324160][ T6995] veth0_macvtap: left promiscuous mode [ 202.336708][ T6995] veth1_vlan: left promiscuous mode [ 202.342548][ T6995] veth0_vlan: left promiscuous mode [ 202.715287][T11899] nbd: couldn't find a device at index 0 [ 202.788274][ T4491] Bluetooth: hci0: command tx timeout [ 202.801644][T11902] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2249'. [ 203.085567][ T6995] team0 (unregistering): Port device team_slave_1 removed [ 203.132359][ T6995] team0 (unregistering): Port device team_slave_0 removed [ 203.499766][T11887] hsr0: entered promiscuous mode [ 203.505526][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 203.516883][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'. [ 203.629807][T11916] vlan3: entered promiscuous mode [ 203.748738][T11928] nbd: couldn't find a device at index 0 [ 203.995449][ T6995] IPVS: stop unused estimator thread 0... [ 204.156477][T11949] netlink: 'syz.1.2264': attribute type 6 has an invalid length. [ 204.165841][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 204.602345][T11977] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2273'. [ 204.708581][T11987] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.793958][T11994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2277'. [ 204.900259][T11999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2280'. [ 205.118538][T12011] netlink: 'syz.3.2284': attribute type 4 has an invalid length. [ 205.273050][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'. [ 205.394069][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.410049][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.425267][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.450713][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.459292][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 205.470895][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.657775][T12043] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 205.757058][T12049] netlink: 'syz.4.2298': attribute type 10 has an invalid length. [ 205.771025][T12049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.828262][T12049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.850464][T12049] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 205.929581][ T6985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.991702][T12059] netlink: 'syz.4.2301': attribute type 1 has an invalid length. [ 206.007235][T12059] nbd: error processing sock list [ 206.118083][ T6985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.256777][T12081] Cannot find add_set index 0 as target [ 206.290110][ T6985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.323446][T12082] netlink: 'syz.3.2308': attribute type 21 has an invalid length. [ 206.439954][ T6985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.599938][T12097] netlink: 'syz.2.2315': attribute type 64 has an invalid length. [ 206.786738][T12087] netlink: 'syz.4.2311': attribute type 3 has an invalid length. [ 206.835416][T12109] __nla_validate_parse: 12 callbacks suppressed [ 206.835437][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2318'. [ 206.896713][T12029] chnl_net:caif_netlink_parms(): no params data found [ 207.041578][T12124] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2322'. [ 207.077449][T12123] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 207.127014][ T6985] bridge_slave_1: left allmulticast mode [ 207.138613][ T6985] bridge_slave_1: left promiscuous mode [ 207.144334][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.178217][ T6985] bridge_slave_0: left allmulticast mode [ 207.183978][ T6985] bridge_slave_0: left promiscuous mode [ 207.191464][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.507821][ T4491] Bluetooth: hci5: command tx timeout [ 207.562745][ T6985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.574305][ T6985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.591001][ T6985] bond0 (unregistering): Released all slaves [ 207.709127][T12029] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.734801][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.745953][T12140] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2323'. [ 207.756841][T12029] bridge_slave_0: entered allmulticast mode [ 207.775270][T12029] bridge_slave_0: entered promiscuous mode [ 207.795268][T12029] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.810743][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.829963][T12029] bridge_slave_1: entered allmulticast mode [ 207.849033][T12029] bridge_slave_1: entered promiscuous mode [ 207.858479][T12145] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2326'. [ 207.885657][T12145] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 207.895951][T12145] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.912739][T12149] netlink: 'syz.0.2328': attribute type 3 has an invalid length. [ 207.999380][T12145] netlink: 'syz.2.2326': attribute type 10 has an invalid length. [ 208.024442][T12145] team0: left allmulticast mode [ 208.030218][T12145] team_slave_1: left allmulticast mode [ 208.035860][T12145] team0: left promiscuous mode [ 208.043503][T12145] team_slave_1: left promiscuous mode [ 208.055457][T12145] bridge0: port 4(team0) entered disabled state [ 208.074338][T12145] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.091898][T12145] bond0: (slave team0): Enslaving as an active interface with an up link [ 208.106653][T12141] netlink: 'syz.2.2326': attribute type 10 has an invalid length. [ 208.131654][T12141] bond0: (slave team0): Releasing backup interface [ 208.154166][T12141] bridge0: port 4(team0) entered blocking state [ 208.166810][T12141] bridge0: port 4(team0) entered disabled state [ 208.173817][T12141] team0: entered allmulticast mode [ 208.185299][T12141] team_slave_1: entered allmulticast mode [ 208.192927][T12141] team0: entered promiscuous mode [ 208.208127][T12141] team_slave_1: entered promiscuous mode [ 208.228358][T12029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.293477][T12029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.407551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.417126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.461774][T12029] team0: Port device team_slave_0 added [ 208.498630][T12029] team0: Port device team_slave_1 added [ 208.551993][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.577572][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.602714][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.611874][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.622407][T12181] xt_cgroup: invalid path, errno=-2 [ 208.665269][ T6985] veth1_macvtap: left promiscuous mode [ 208.671219][ T6985] veth0_macvtap: left promiscuous mode [ 208.676920][ T6985] veth1_vlan: left promiscuous mode [ 208.704895][ T6985] veth0_vlan: left promiscuous mode [ 208.759207][T12185] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2339'. [ 209.026223][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 209.160546][T12200] xt_SECMARK: invalid mode: 0 [ 209.342103][ T6985] team0 (unregistering): Port device team_slave_1 removed [ 209.397015][ T6985] team0 (unregistering): Port device team_slave_0 removed [ 209.587367][ T4491] Bluetooth: hci5: command tx timeout [ 209.850680][T12029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.863612][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.890329][T12029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.903056][T12029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.910321][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.939734][T12208] nbd: socks must be embedded in a SOCK_ITEM attr [ 209.953966][T12029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.215656][T12029] hsr_slave_0: entered promiscuous mode [ 210.230155][T12228] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 210.245651][T12029] hsr_slave_1: entered promiscuous mode [ 210.268761][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 210.280103][T12029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.309496][T12029] Cannot create hsr debugfs directory [ 210.585975][T12247] xt_SECMARK: invalid mode: 0 [ 210.632048][T12252] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2361'. [ 210.679327][T12252] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.973047][T12268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.999391][T12268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.038736][T12268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.062019][T12268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.074347][T12268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.093420][T12268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.130279][T12276] syz_tun: entered promiscuous mode [ 211.136163][T12276] vlan3: entered promiscuous mode [ 211.159547][T12276] syz_tun: left promiscuous mode [ 211.271939][T12282] Cannot find del_set index 2 as target [ 211.340365][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'. [ 211.441215][T12029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.463211][T12029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.484816][T12029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.503611][T12029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.536686][T12291] netlink: 191688 bytes leftover after parsing attributes in process `syz.0.2375'. [ 211.668291][ T4491] Bluetooth: hci5: command tx timeout [ 211.719841][T12029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.799464][T12029] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.880292][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.887489][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.922970][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.930204][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.994224][T12309] netlink: 'syz.3.2383': attribute type 4 has an invalid length. [ 212.155494][T12317] __nla_validate_parse: 2 callbacks suppressed [ 212.155514][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2385'. [ 212.260749][T12324] netlink: 'syz.3.2388': attribute type 4 has an invalid length. [ 212.307053][T12029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.431611][T12029] veth0_vlan: entered promiscuous mode [ 212.453703][T12029] veth1_vlan: entered promiscuous mode [ 212.511018][T12029] veth0_macvtap: entered promiscuous mode [ 212.516970][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'. [ 212.557440][T12029] veth1_macvtap: entered promiscuous mode [ 212.599765][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.618416][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.636875][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.648204][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.658615][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.675693][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.708842][T12029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.748118][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.773824][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.784483][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.806009][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.818136][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.832515][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.842625][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.853637][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.868099][T12029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.923932][T12029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.935083][T12029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.955481][T12029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.964723][T12029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.038565][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'. [ 213.062371][T12371] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2402'. [ 213.168008][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.179748][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.192044][T12373] netlink: 'syz.4.2401': attribute type 11 has an invalid length. [ 213.239811][T12358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.255433][T12358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.361348][T12383] netlink: 'syz.1.2279': attribute type 11 has an invalid length. [ 213.447318][T12388] netlink: 'syz.1.2408': attribute type 3 has an invalid length. [ 213.461209][T12388] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2408'. [ 213.471340][T12388] netlink: 'syz.1.2408': attribute type 3 has an invalid length. [ 213.479393][T12388] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2408'. [ 213.637058][T12400] bridge0: entered promiscuous mode [ 213.654221][T12400] vlan1: entered promiscuous mode [ 213.670423][T12400] bridge0: left promiscuous mode [ 213.751292][ T4491] Bluetooth: hci5: command tx timeout [ 213.813325][T12413] netlink: 'syz.3.2416': attribute type 9 has an invalid length. [ 213.821591][T12413] netlink: 911 bytes leftover after parsing attributes in process `syz.3.2416'. [ 213.888649][T12416] --map-set only usable from mangle table [ 213.919659][T12422] netlink: 'syz.2.2419': attribute type 6 has an invalid length. [ 213.932239][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2419'. [ 214.151994][T12435] bond_slave_0: entered promiscuous mode [ 214.157799][T12435] bond_slave_1: entered promiscuous mode [ 214.188913][T12435] macsec1: entered allmulticast mode [ 214.200475][T12435] bond0: entered allmulticast mode [ 214.212107][T12435] bond_slave_0: entered allmulticast mode [ 214.222863][T12435] bond_slave_1: entered allmulticast mode [ 214.238385][T12435] bond0: left allmulticast mode [ 214.243450][T12435] bond_slave_0: left allmulticast mode [ 214.251097][T12435] bond_slave_1: left allmulticast mode [ 214.256765][T12435] bond_slave_0: left promiscuous mode [ 214.262339][T12435] bond_slave_1: left promiscuous mode [ 214.303359][T12439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2427'. [ 214.315438][T12440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2427'. [ 215.076823][T12489] netlink: 'syz.2.2443': attribute type 4 has an invalid length. [ 215.144224][T12497] netlink: 'syz.4.2446': attribute type 4 has an invalid length. [ 215.413915][T12514] nbd: couldn't find a device at index 0 [ 216.522300][T12566] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 216.685287][T12573] netlink: 'syz.4.2473': attribute type 64 has an invalid length. [ 217.411604][T12623] __nla_validate_parse: 14 callbacks suppressed [ 217.411625][T12623] netlink: 816 bytes leftover after parsing attributes in process `syz.4.2491'. [ 217.669835][ T5147] net_ratelimit: 5 callbacks suppressed [ 217.669855][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.775384][T12645] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 218.026798][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 218.038646][T12663] macsec0: entered promiscuous mode [ 218.044123][T12663] macsec0: entered allmulticast mode [ 218.059556][T12663] veth1_macvtap: entered allmulticast mode [ 218.181290][T12674] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2508'. [ 218.283723][T12677] macvlan2: entered allmulticast mode [ 218.322515][T12677] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 218.324119][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 218.355500][T12677] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 218.397594][T12677] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 218.494889][T12690] bond0: entered promiscuous mode [ 218.513267][T12690] bond_slave_0: entered promiscuous mode [ 218.519938][T12690] bond_slave_1: entered promiscuous mode [ 218.526337][T12690] macvlan2: entered promiscuous mode [ 218.577904][T12694] netlink: 'syz.1.2509': attribute type 25 has an invalid length. [ 218.587248][T12694] netlink: 'syz.1.2509': attribute type 7 has an invalid length. [ 218.604555][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2514'. [ 218.616183][T12701] netlink: 'syz.3.2515': attribute type 4 has an invalid length. [ 218.665139][T12704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.674298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.688257][T12704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.701467][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.717628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.746803][T12710] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 218.788317][T12715] Can't find ip_set type hash:ip,pïrt,ip [ 218.814704][T12714] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.836114][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2521'. [ 218.899275][T12722] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 218.921668][T12702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.184934][T12741] netlink: 'syz.0.2532': attribute type 1 has an invalid length. [ 219.217591][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 219.217668][T12747] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2529'. [ 219.406590][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 219.455914][T12763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2539'. [ 219.869747][T12796] Cannot find add_set index 0 as target [ 219.916400][T12798] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 220.037687][T12805] vlan1: entered promiscuous mode [ 220.043027][T12805] xfrm0: entered promiscuous mode [ 220.089462][T12805] vlan1: entered allmulticast mode [ 220.094628][T12805] xfrm0: entered allmulticast mode [ 220.114546][T12805] team0: Port device vlan1 added [ 220.747810][T12854] x_tables: unsorted underflow at hook 4 [ 220.968144][T12868] pim6reg1: entered promiscuous mode [ 220.982286][T12868] pim6reg1: entered allmulticast mode [ 221.266204][T12895] netlink: 'syz.4.2592': attribute type 4 has an invalid length. [ 221.382933][T12900] can: request_module (can-proto-0) failed. [ 221.810113][T12938] nbd: couldn't find a device at index 0 [ 221.918682][T12943] vlan3: entered promiscuous mode [ 222.017527][T12955] netlink: 'syz.4.2616': attribute type 6 has an invalid length. [ 222.351345][T12975] IPVS: set_ctl: invalid protocol: 50 172.20.20.20:20001 [ 222.639308][T12990] netlink: 'syz.1.2626': attribute type 10 has an invalid length. [ 222.648076][ T29] audit: type=1107 audit(1720408129.102:5): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 222.751888][T12993] netlink: 'syz.1.2626': attribute type 8 has an invalid length. [ 223.583780][T12990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.643162][T12990] batadv0: entered promiscuous mode [ 223.677972][T12990] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 223.717913][T12996] __nla_validate_parse: 14 callbacks suppressed [ 223.717934][T12996] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2627'. [ 224.081950][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2638'. [ 224.216656][T13026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2637'. [ 224.242420][T13032] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2643'. [ 224.534838][T13053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2649'. [ 224.545132][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 224.621363][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2653'. [ 224.631193][T13061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2652'. [ 224.732617][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 224.749045][T13069] xt_SECMARK: invalid mode: 0 [ 224.804119][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 224.826471][T13075] netlink: 'syz.2.2658': attribute type 5 has an invalid length. [ 224.969410][T13087] nbd: must specify a size in bytes for the device [ 224.999503][ T8] net_ratelimit: 9 callbacks suppressed [ 224.999522][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.019428][T13087] netlink: 'syz.3.2661': attribute type 10 has an invalid length. [ 225.062891][T13087] team0: Cannot enslave team device to itself [ 225.791558][T13139] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 225.908286][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.046592][T13162] xt_SECMARK: invalid mode: 0 [ 226.162366][T13171] netlink: 'syz.1.2691': attribute type 4 has an invalid length. [ 226.238649][T13177] vlan2: entered promiscuous mode [ 226.333412][T13182] gtp1: entered promiscuous mode [ 226.338907][T13182] gtp1: entered allmulticast mode [ 226.401117][T13184] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.561347][T13195] netlink: 'syz.1.2702': attribute type 1 has an invalid length. [ 226.629209][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.986383][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.021781][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.031856][T13230] Cannot find del_set index 2 as target [ 227.047365][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.099445][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.120462][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.350185][T13251] xt_SECMARK: invalid mode: 0 [ 227.381078][T13253] netlink: 'syz.2.2721': attribute type 10 has an invalid length. [ 227.390244][T13253] bridge0: port 3(geneve1) entered disabled state [ 227.396908][T13253] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.444972][T13253] bridge0: port 3(geneve1) entered blocking state [ 227.452458][T13253] bridge0: port 3(geneve1) entered forwarding state [ 227.459416][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.466594][T13253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.496030][T13253] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 227.518563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.645056][T13275] netlink: 'syz.0.2728': attribute type 13 has an invalid length. [ 227.668502][T13275] gretap0: entered allmulticast mode [ 227.698534][T13275] gretap0: refused to change device tx_queue_len [ 227.734929][T13274] vlan2: entered promiscuous mode [ 227.740833][T13274] syz_tun: entered promiscuous mode [ 227.753583][T13274] syz_tun: left promiscuous mode [ 228.292461][T13315] netlink: 'syz.0.2742': attribute type 13 has an invalid length. [ 228.326015][T13315] gretap0: refused to change device tx_queue_len [ 228.368873][T13318] Êü: entered promiscuous mode [ 228.507865][T13332] xt_SECMARK: invalid mode: 0 [ 228.786046][T13352] vlan3: entered promiscuous mode [ 228.865570][T13355] __nla_validate_parse: 25 callbacks suppressed [ 228.865590][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2759'. [ 228.896719][T13365] @ÿ: renamed from veth0_vlan (while UP) [ 229.001318][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'. [ 229.034245][T13374] xt_SECMARK: invalid mode: 0 [ 229.118369][T13380] netlink: 'syz.3.2768': attribute type 4 has an invalid length. [ 229.133670][T13377] bond_slave_0: entered promiscuous mode [ 229.139476][T13377] bond_slave_1: entered promiscuous mode [ 229.145182][T13377] batadv_slave_0: entered promiscuous mode [ 229.158066][T13377] macsec2: entered allmulticast mode [ 229.167428][T13377] bond0: entered allmulticast mode [ 229.172691][T13377] bond_slave_0: entered allmulticast mode [ 229.178978][T13377] bond_slave_1: entered allmulticast mode [ 229.184848][T13377] batadv0: entered allmulticast mode [ 229.195632][T13377] batadv_slave_0: entered allmulticast mode [ 229.220965][T13377] bond0: left allmulticast mode [ 229.226085][T13377] bond_slave_0: left allmulticast mode [ 229.231919][T13377] bond_slave_1: left allmulticast mode [ 229.237975][T13377] batadv0: left allmulticast mode [ 229.243141][T13377] batadv_slave_0: left allmulticast mode [ 229.243588][T13386] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2770'. [ 229.249118][T13377] bond_slave_0: left promiscuous mode [ 229.263926][T13377] bond_slave_1: left promiscuous mode [ 229.269455][T13377] batadv_slave_0: left promiscuous mode [ 229.444764][T13390] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 229.499863][T13397] netlink: 'syz.4.2775': attribute type 4 has an invalid length. [ 229.596035][T13404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2777'. [ 229.601063][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 229.623738][T13408] xt_SECMARK: invalid mode: 0 [ 229.832355][T13421] netlink: 'syz.3.2785': attribute type 4 has an invalid length. [ 230.005517][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 230.024630][T13435] xt_SECMARK: invalid mode: 0 [ 230.038316][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'. [ 230.073603][T13437] netlink: 'syz.1.2793': attribute type 46 has an invalid length. [ 230.073752][T13433] nbd: couldn't find a device at index 0 [ 230.185651][T13443] netlink: 'syz.1.2796': attribute type 21 has an invalid length. [ 230.408053][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2804'. [ 230.490589][T13472] xt_SECMARK: invalid mode: 0 [ 230.573590][T13474] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 230.594681][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2808'. [ 230.609197][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2810'. [ 230.681776][T13483] netlink: 'syz.1.2809': attribute type 11 has an invalid length. [ 230.750425][T13495] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 230.759492][T13495] nbd: error processing sock list [ 230.915704][T13506] netlink: 'syz.1.2816': attribute type 3 has an invalid length. [ 230.918441][T13511] xt_SECMARK: invalid mode: 0 [ 230.930564][T13506] netlink: 'syz.1.2816': attribute type 3 has an invalid length. [ 231.062527][T13520] netlink: 'syz.3.2822': attribute type 64 has an invalid length. [ 231.112814][T13526] vlan4: entered promiscuous mode [ 231.142213][T13526] bridge0: entered promiscuous mode [ 231.174329][T13526] vlan4: entered allmulticast mode [ 231.194601][T13526] bridge0: entered allmulticast mode [ 231.210501][T13526] bridge0: left allmulticast mode [ 231.232463][T13526] bridge0: left promiscuous mode [ 231.306373][T13536] netlink: 'syz.4.2828': attribute type 21 has an invalid length. [ 231.334651][T13536] netlink: 'syz.4.2828': attribute type 6 has an invalid length. [ 231.524957][T13557] xt_SECMARK: invalid mode: 0 [ 231.563535][T13559] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 231.985359][T13546] dvmrp0: entered allmulticast mode [ 232.216987][T12360] dvmrp0 (unregistering): left allmulticast mode [ 232.371482][T13585] syzkaller1: entered promiscuous mode [ 232.386438][T13585] syzkaller1: entered allmulticast mode [ 232.702731][T13601] batadv0: Device is already in use. [ 232.850654][T13611] net_ratelimit: 7 callbacks suppressed [ 232.850669][T13611] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 232.970558][T13618] xt_SECMARK: invalid mode: 0 [ 233.038351][T13622] nbd: socks must be embedded in a SOCK_ITEM attr [ 233.985949][T13665] __nla_validate_parse: 14 callbacks suppressed [ 233.985969][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 234.105186][T13670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2873'. [ 234.309605][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2879'. [ 234.404535][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'. [ 234.478449][T13698] xt_SECMARK: invalid mode: 0 [ 234.480179][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2885'. [ 234.544847][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'. [ 234.868900][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 234.882618][T13727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2901'. [ 234.889917][T13726] nbd: couldn't find a device at index 0 [ 235.052364][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'. [ 235.141178][T13746] validate_nla: 5 callbacks suppressed [ 235.141197][T13746] netlink: 'syz.2.2909': attribute type 9 has an invalid length. [ 235.176265][T13746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2909'. [ 235.509792][T13771] bridge0: entered promiscuous mode [ 235.522902][T13771] vlan4: entered promiscuous mode [ 235.531978][T13771] bridge0: left promiscuous mode [ 235.559107][T13779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.577629][T13776] netlink: 'syz.3.2921': attribute type 6 has an invalid length. [ 235.662704][T13784] xt_SECMARK: invalid mode: 0 [ 235.804076][T13797] netlink: 'syz.0.2928': attribute type 4 has an invalid length. [ 236.034954][T13812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.102729][T13814] macsec1: entered allmulticast mode [ 236.108551][T13814] bond0: entered allmulticast mode [ 236.113794][T13814] bond_slave_0: entered allmulticast mode [ 236.121182][T13814] bond_slave_1: entered allmulticast mode [ 236.126917][T13814] batadv0: entered allmulticast mode [ 236.138599][T13814] bond0: left allmulticast mode [ 236.155106][T13814] bond_slave_0: left allmulticast mode [ 236.162372][T13814] bond_slave_1: left allmulticast mode [ 236.174966][T13814] batadv0: left allmulticast mode [ 236.198839][T13820] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 236.319752][T13824] netlink: 'syz.0.2939': attribute type 4 has an invalid length. [ 237.032660][T13885] xt_SECMARK: invalid mode: 0 [ 237.080075][T13889] ebt_among: dst integrity fail: 101 [ 237.386163][T13908] netlink: zone id is out of range [ 237.392088][T13908] netlink: zone id is out of range [ 237.403496][T13908] netlink: zone id is out of range [ 237.414634][T13908] netlink: zone id is out of range [ 237.427592][T13908] netlink: zone id is out of range [ 237.438718][T13908] netlink: zone id is out of range [ 237.453442][T13908] netlink: zone id is out of range [ 237.474767][T13908] netlink: zone id is out of range [ 237.485726][T13908] netlink: zone id is out of range [ 237.543229][T13923] netlink: 'syz.4.2969': attribute type 20 has an invalid length. [ 237.667209][ T5097] Bluetooth: hci1: command 0x0406 tx timeout [ 238.095100][T13942] netlink: 'syz.0.2977': attribute type 1 has an invalid length. [ 238.614257][T13964] netlink: 'syz.4.2985': attribute type 10 has an invalid length. [ 238.657358][T13964] xt_hashlimit: invalid rate [ 238.718562][T13967] netlink: 'syz.0.2987': attribute type 3 has an invalid length. [ 238.726820][T13969] xt_SECMARK: invalid mode: 0 [ 239.044803][T13987] ɶƣ0GC¦: entered promiscuous mode [ 239.073765][T13991] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 239.141343][T13993] net_ratelimit: 23 callbacks suppressed [ 239.141363][T13993] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 239.263538][T14004] __nla_validate_parse: 16 callbacks suppressed [ 239.263560][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 239.382958][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3003'. [ 239.434036][T14012] Bluetooth: hci3: service_discovery: too big uuid_count value 65280 [ 239.554273][T14022] netlink: 'syz.2.3009': attribute type 4 has an invalid length. [ 239.675985][T14027] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3012'. [ 239.680081][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3013'. [ 239.739318][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 239.795590][T14037] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 239.800342][T14038] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3014'. [ 239.847344][T14033] netlink: 'syz.4.3016': attribute type 4 has an invalid length. [ 240.130263][T14054] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.198357][T14059] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3023'. [ 240.377390][T14077] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3030'. [ 240.550407][T14091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3036'. [ 240.603429][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 240.608960][T14095] Cannot find del_set index 2 as target [ 240.753445][T14101] bridge_slave_1: left allmulticast mode [ 240.766163][T14101] bridge_slave_1: left promiscuous mode [ 240.776511][T14101] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.829420][T14101] bridge6: port 1(bridge_slave_1) entered blocking state [ 240.840306][T14101] bridge6: port 1(bridge_slave_1) entered disabled state [ 240.857430][T14101] bridge_slave_1: entered allmulticast mode [ 240.872840][T14101] bridge_slave_1: entered promiscuous mode [ 241.494360][T14153] netlink: 'syz.0.3060': attribute type 4 has an invalid length. [ 241.642007][T14158] bond1: entered allmulticast mode [ 241.677254][T14158] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 241.693678][T14158] batadv1: entered allmulticast mode [ 241.700445][T14158] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 241.748300][T14158] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 241.764622][T14158] batadv1: left allmulticast mode [ 241.790873][T14158] bond1 (unregistering): Released all slaves [ 242.099182][T14182] xt_SECMARK: invalid mode: 0 [ 242.316047][T14196] tipc: Started in network mode [ 242.327238][T14196] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 242.347715][T14196] tipc: Enabled bearer , priority 0 [ 242.423511][T14200] bond3: entered allmulticast mode [ 242.460417][T14204] netlink: 'syz.4.3078': attribute type 4 has an invalid length. [ 242.491617][T14200] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 242.512037][T14200] batadv1: entered allmulticast mode [ 242.518320][T14200] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 242.556454][T14200] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 242.573914][T14200] batadv1: left allmulticast mode [ 242.595504][T14200] bond3 (unregistering): Released all slaves [ 243.005025][T14235] vlan4: entered promiscuous mode [ 243.089358][T14242] netlink: 'syz.1.3090': attribute type 4 has an invalid length. [ 243.321826][T14258] nbd: couldn't find a device at index 0 [ 243.489641][ T5147] tipc: Node number set to 8432298 [ 243.548772][T14274] xt_SECMARK: invalid mode: 0 [ 243.647118][T14279] bond_slave_0: entered promiscuous mode [ 243.653304][T14279] bond_slave_1: entered promiscuous mode [ 243.659146][T14279] bridge0: entered promiscuous mode [ 243.667796][T14279] macsec1: entered allmulticast mode [ 243.673232][T14279] bond0: entered allmulticast mode [ 243.679901][T14279] bond_slave_0: entered allmulticast mode [ 243.685778][T14279] bond_slave_1: entered allmulticast mode [ 243.691937][T14279] bridge0: entered allmulticast mode [ 243.706278][T14279] bond0: left allmulticast mode [ 243.711490][T14279] bond_slave_0: left allmulticast mode [ 243.718215][T14279] bond_slave_1: left allmulticast mode [ 243.724099][T14279] bridge0: left allmulticast mode [ 243.729831][T14279] bond_slave_0: left promiscuous mode [ 243.735331][T14279] bond_slave_1: left promiscuous mode [ 243.742214][T14279] bridge0: left promiscuous mode [ 243.921439][T14289] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 243.928525][T14289] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.935254][T14289] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 243.941952][T14289] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.949443][T14289] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 243.955861][T14289] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.962368][T14289] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 243.968861][T14289] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 244.355603][T14316] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 244.363345][T14318] __nla_validate_parse: 16 callbacks suppressed [ 244.363364][T14318] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3118'. [ 244.402088][T14316] netlink: 'syz.4.3117': attribute type 3 has an invalid length. [ 244.425059][T14316] netlink: 'syz.4.3117': attribute type 3 has an invalid length. [ 244.642021][T14328] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.719040][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 244.744133][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3129'. [ 244.787216][T14344] xt_SECMARK: invalid mode: 0 [ 244.821141][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 244.861393][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3129'. [ 244.920673][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3132'. [ 244.936360][T14354] nbd: couldn't find a device at index 0 [ 245.308715][T14386] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3142'. [ 245.454722][T14394] bridge0: entered promiscuous mode [ 245.464907][T14394] vlan2: entered promiscuous mode [ 245.485969][T14394] bridge0: left promiscuous mode [ 245.513705][T14398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.521016][T14398] IPv6: NLM_F_CREATE should be set when creating new route [ 245.528347][T14398] IPv6: NLM_F_CREATE should be set when creating new route [ 245.606978][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 245.710204][T14414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3150'. [ 245.814831][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3152'. [ 245.899774][T14424] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 246.044181][T14431] bond4: entered allmulticast mode [ 246.082719][T14437] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 246.125001][T14437] batadv1: entered allmulticast mode [ 246.131294][T14437] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 246.145933][T14439] bridge0: entered promiscuous mode [ 246.152503][T14439] vlan4: entered promiscuous mode [ 246.166653][T14439] bridge0: left promiscuous mode [ 246.188979][T14446] xt_SECMARK: invalid mode: 0 [ 246.226112][T14431] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 246.249529][T14431] batadv1: left allmulticast mode [ 246.290628][T14431] bond4 (unregistering): Released all slaves [ 247.124955][T14512] netlink: 'syz.3.3184': attribute type 3 has an invalid length. [ 247.405248][T14534] xt_SECMARK: invalid mode: 0 [ 247.786067][T14557] netlink: 'syz.4.3199': attribute type 2 has an invalid length. [ 247.883608][T14561] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 248.714728][ T4491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.724007][ T4491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.738934][ T4491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.747213][ T4491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.757916][ T4491] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.765304][ T4491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.766716][T14608] xt_SECMARK: invalid mode: 0 [ 248.904727][T14612] netlink: 'syz.3.3221': attribute type 5 has an invalid length. [ 248.995338][T14619] sctp: [Deprecated]: syz.1.3224 (pid 14619) Use of int in max_burst socket option. [ 248.995338][T14619] Use struct sctp_assoc_value instead [ 249.047503][T14613] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 249.174912][T14631] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 249.283051][T14633] nbd: socks must be embedded in a SOCK_ITEM attr [ 249.454999][T14644] xt_SECMARK: invalid mode: 0 [ 249.480278][T14651] netlink: 'syz.0.3234': attribute type 1 has an invalid length. [ 249.499010][T14651] __nla_validate_parse: 19 callbacks suppressed [ 249.499030][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 249.502546][T12358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.666240][T12358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.709233][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3241'. [ 249.948076][T14680] xt_SECMARK: invalid mode: 0 [ 249.970240][T12358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.050003][T14673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3246'. [ 250.112891][T14682] bridge_slave_1: left allmulticast mode [ 250.122743][T14682] bridge_slave_1: left promiscuous mode [ 250.129477][T14682] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.145616][T14682] bridge3: port 1(bridge_slave_1) entered blocking state [ 250.166004][T14682] bridge3: port 1(bridge_slave_1) entered disabled state [ 250.181287][T14682] bridge_slave_1: entered allmulticast mode [ 250.195970][T14682] bridge_slave_1: entered promiscuous mode [ 250.210937][T14682] bridge3: port 1(bridge_slave_1) entered blocking state [ 250.218200][T14682] bridge3: port 1(bridge_slave_1) entered forwarding state [ 250.246750][T14668] pim6reg1: entered promiscuous mode [ 250.252771][T14668] pim6reg1: entered allmulticast mode [ 250.332966][T12358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.464004][T14604] chnl_net:caif_netlink_parms(): no params data found [ 250.578990][T14707] FAULT_INJECTION: forcing a failure. [ 250.578990][T14707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.601408][T14707] CPU: 0 PID: 14707 Comm: syz.0.3255 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 250.611713][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 250.621797][T14707] Call Trace: [ 250.625079][T14707] [ 250.628007][T14707] dump_stack_lvl+0x241/0x360 [ 250.632695][T14707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.637911][T14707] ? __pfx__printk+0x10/0x10 [ 250.642502][T14707] ? __pfx_lock_release+0x10/0x10 [ 250.647522][T14707] ? vfs_write+0x7c4/0xc90 [ 250.651935][T14707] should_fail_ex+0x3b0/0x4e0 [ 250.656610][T14707] _copy_from_user+0x2f/0xe0 [ 250.661279][T14707] __sys_bpf+0x1a4/0x810 [ 250.665526][T14707] ? __pfx___sys_bpf+0x10/0x10 [ 250.670308][T14707] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.676284][T14707] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.682607][T14707] ? do_syscall_64+0x100/0x230 [ 250.687375][T14707] __x64_sys_bpf+0x7c/0x90 [ 250.691789][T14707] do_syscall_64+0xf3/0x230 [ 250.696288][T14707] ? clear_bhb_loop+0x35/0x90 [ 250.700982][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.706885][T14707] RIP: 0033:0x7f94a4d75bd9 [ 250.711303][T14707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.730926][T14707] RSP: 002b:00007f94a5bb2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.739344][T14707] RAX: ffffffffffffffda RBX: 00007f94a4f03f60 RCX: 00007f94a4d75bd9 [ 250.747307][T14707] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000009 [ 250.755271][T14707] RBP: 00007f94a5bb20a0 R08: 0000000000000000 R09: 0000000000000000 [ 250.763244][T14707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.771210][T14707] R13: 000000000000000b R14: 00007f94a4f03f60 R15: 00007ffffb467e28 [ 250.779188][T14707] [ 250.877682][ T53] Bluetooth: hci0: command tx timeout [ 250.918198][T12358] bridge_slave_0: left allmulticast mode [ 250.924902][T12358] bridge_slave_0: left promiscuous mode [ 250.959734][T12358] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.980090][T12358] veth1_to_bond: left allmulticast mode [ 250.985679][T12358] veth1_to_bond: left promiscuous mode [ 250.996215][T12358] bridge4: port 2(veth1_to_bond) entered disabled state [ 251.006811][T12358] bridge_slave_1: left allmulticast mode [ 251.016565][T12358] bridge_slave_1: left promiscuous mode [ 251.024410][T12358] bridge4: port 1(bridge_slave_1) entered disabled state [ 251.135869][T12358] ip6gretap0 (unregistering): left promiscuous mode [ 251.324745][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'. [ 251.357494][T12358] bridge0 (unregistering): left promiscuous mode [ 252.056892][T12358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.070945][T12358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.083589][T12358] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 252.094619][T12358] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 252.106995][T12358] bond0 (unregistering): Released all slaves [ 252.119653][T12358] bond1 (unregistering): Released all slaves [ 252.134559][T12358] bond2 (unregistering): Released all slaves [ 252.156627][T12358] bond3 (unregistering): Released all slaves [ 252.201957][T14724] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3259'. [ 252.248528][T14724] bridge3: port 1(bridge_slave_1) entered disabled state [ 252.297476][T14727] netlink: 'syz.2.3260': attribute type 10 has an invalid length. [ 252.297534][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3263'. [ 252.351743][T14727] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 252.380034][T14734] net_ratelimit: 49 callbacks suppressed [ 252.380053][T14734] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 252.487591][T14604] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.515511][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.535916][T14604] bridge_slave_0: entered allmulticast mode [ 252.568759][T14604] bridge_slave_0: entered promiscuous mode [ 252.594796][T12358] ɶƣ0GC¦: left promiscuous mode [ 252.654259][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.666562][T14604] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.689107][T14604] bridge_slave_1: entered allmulticast mode [ 252.699679][T14604] bridge_slave_1: entered promiscuous mode [ 252.878870][T14604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.904514][T14604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.937694][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 252.946651][T14765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3273'. [ 252.958120][ T53] Bluetooth: hci0: command tx timeout [ 252.990852][T14604] team0: Port device team_slave_0 added [ 253.027410][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 253.059590][T12358] mac80211_hwsim hwsim3 wlan0 (unregistering): left promiscuous mode [ 253.142724][T14604] team0: Port device team_slave_1 added [ 253.151902][T14767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3274'. [ 253.316599][T14604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.331809][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.370713][T14604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.396229][T14773] tipc: Enabling of bearer rejected, failed to enable media [ 253.410324][T14778] netlink: 'syz.0.3279': attribute type 46 has an invalid length. [ 253.442679][T14604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.457211][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.528994][T14604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.534462][T14782] netlink: 'syz.3.3281': attribute type 4 has an invalid length. [ 253.553630][T14779] netlink: 'syz.0.3279': attribute type 46 has an invalid length. [ 253.589267][T14785] bridge0: entered promiscuous mode [ 253.595132][T14785] vlan2: entered promiscuous mode [ 253.627922][T14785] bridge0: left promiscuous mode [ 253.808450][T12358] hsr_slave_0: left promiscuous mode [ 253.818513][T12358] hsr_slave_1: left promiscuous mode [ 253.834806][T12358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.842531][T12358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.861289][T12358] batman_adv: batadv0: Interface deactivated: macsec1 [ 253.882345][T14806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3287'. [ 253.882796][T12358] batman_adv: batadv0: Removing interface: macsec1 [ 253.942658][T12358] dummy0: left promiscuous mode [ 253.948273][T12358] veth1_macvtap: left promiscuous mode [ 253.954090][T12358] veth0_macvtap: left promiscuous mode [ 253.960361][T12358] veth1_vlan: left promiscuous mode [ 253.973358][T12358] @ÿ: left promiscuous mode [ 254.238307][T12358] pim6reg (unregistering): left allmulticast mode [ 254.694447][T12358] team0 (unregistering): Port device team_slave_1 removed [ 254.737913][T12358] team0 (unregistering): Port device team_slave_0 removed [ 254.973952][T12358] vxcan1 (unregistering): left allmulticast mode [ 255.031028][ T4491] Bluetooth: hci0: command tx timeout [ 255.206374][T14808] bond_slave_0: entered promiscuous mode [ 255.212267][T14808] bond_slave_1: entered promiscuous mode [ 255.229983][T14808] macsec2: entered allmulticast mode [ 255.235328][T14808] bond0: entered allmulticast mode [ 255.246026][T14821] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3291'. [ 255.251680][T14808] bond_slave_0: entered allmulticast mode [ 255.265874][T14808] bond_slave_1: entered allmulticast mode [ 255.285794][T14808] bond0: left allmulticast mode [ 255.290938][T14808] bond_slave_0: left allmulticast mode [ 255.298712][T14808] bond_slave_1: left allmulticast mode [ 255.304341][T14808] bond_slave_0: left promiscuous mode [ 255.311034][T14808] bond_slave_1: left promiscuous mode [ 255.372718][T14806] netlink: 'syz.2.3287': attribute type 39 has an invalid length. [ 255.418261][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 255.437500][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 255.449391][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 255.544797][T14604] hsr_slave_0: entered promiscuous mode [ 255.576317][T14604] hsr_slave_1: entered promiscuous mode [ 255.609304][T14833] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3296'. [ 255.680322][T14833] openvswitch: netlink: Key type 9560 is out of range max 32 [ 255.767666][T14836] netlink: 'syz.1.3297': attribute type 3 has an invalid length. [ 255.793751][T14836] netlink: 'syz.1.3297': attribute type 3 has an invalid length. [ 256.055479][T14847] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 256.075780][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.103473][T14851] netlink: 'syz.0.3302': attribute type 2 has an invalid length. [ 256.299779][T14862] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3307'. [ 256.411981][T12358] IPVS: stop unused estimator thread 0... [ 256.561492][T14877] netlink: 'syz.3.3311': attribute type 27 has an invalid length. [ 256.573798][T14877] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3311'. [ 256.583415][T14878] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 256.597919][T14877] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 256.805110][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3316'. [ 256.823521][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3316'. [ 256.924041][T14604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.942613][T14604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.959352][T14604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.967685][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3323'. [ 256.981891][T14604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.109687][ T4491] Bluetooth: hci0: command tx timeout [ 257.231096][T14604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.278625][T14604] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.295424][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.302656][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.339054][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.346226][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.426234][T14926] validate_nla: 4 callbacks suppressed [ 257.426249][T14926] netlink: 'syz.2.3332': attribute type 10 has an invalid length. [ 257.654439][T14604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.092118][T14604] veth0_vlan: entered promiscuous mode [ 258.143407][T14604] veth1_vlan: entered promiscuous mode [ 258.254268][T14604] veth0_macvtap: entered promiscuous mode [ 258.310216][T14604] veth1_macvtap: entered promiscuous mode [ 258.378916][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.392795][ T29] audit: type=1107 audit(1720408164.852:6): pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 258.406860][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.433593][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.466497][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.488891][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.500771][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.514690][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.526408][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.544042][T14993] netlink: 'syz.1.3346': attribute type 8 has an invalid length. [ 258.553308][T14604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.565546][T14981] netlink: 'syz.1.3346': attribute type 10 has an invalid length. [ 258.636006][T14990] netlink: 'syz.0.3350': attribute type 4 has an invalid length. [ 258.663992][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.703661][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.725560][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.767368][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.784809][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.796603][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.808669][T14604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.820329][T14604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.832613][T14604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.866538][T14604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.888794][T14604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.898602][T14604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.919226][T14604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.102505][T12358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.120397][T12358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.208347][T15016] nbd: socks must be embedded in a SOCK_ITEM attr [ 259.211291][ T6995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.245174][ T6995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.506086][T15042] Cannot find del_set index 2 as target [ 259.855571][T15064] nbd: couldn't find a device at index -1 [ 260.011123][T15068] ax25_connect(): syz.0.3376 uses autobind, please contact jreuter@yaina.de [ 260.365943][T15099] FAULT_INJECTION: forcing a failure. [ 260.365943][T15099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.392533][T15099] CPU: 0 PID: 15099 Comm: syz.3.3381 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 260.402730][T15099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 260.412806][T15099] Call Trace: [ 260.416086][T15099] [ 260.419025][T15099] dump_stack_lvl+0x241/0x360 [ 260.423716][T15099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.428913][T15099] ? __pfx__printk+0x10/0x10 [ 260.433505][T15099] ? snprintf+0xda/0x120 [ 260.437749][T15099] should_fail_ex+0x3b0/0x4e0 [ 260.442429][T15099] _copy_to_user+0x2f/0xb0 [ 260.446840][T15099] simple_read_from_buffer+0xca/0x150 [ 260.452213][T15099] proc_fail_nth_read+0x1e9/0x250 [ 260.457234][T15099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.462774][T15099] ? rw_verify_area+0x520/0x6b0 [ 260.467614][T15099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.473147][T15099] vfs_read+0x204/0xbc0 [ 260.477293][T15099] ? __pfx_lock_release+0x10/0x10 [ 260.482313][T15099] ? __pfx_vfs_read+0x10/0x10 [ 260.486982][T15099] ? __fget_files+0x29/0x470 [ 260.491568][T15099] ? __fget_files+0x3f6/0x470 [ 260.496333][T15099] ksys_read+0x1a0/0x2c0 [ 260.500573][T15099] ? __pfx_ksys_read+0x10/0x10 [ 260.505327][T15099] ? do_syscall_64+0x100/0x230 [ 260.510087][T15099] ? do_syscall_64+0xb6/0x230 [ 260.514770][T15099] do_syscall_64+0xf3/0x230 [ 260.519273][T15099] ? clear_bhb_loop+0x35/0x90 [ 260.523949][T15099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.529927][T15099] RIP: 0033:0x7f67d1d746bc [ 260.534333][T15099] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 260.553940][T15099] RSP: 002b:00007f67d17ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.562349][T15099] RAX: ffffffffffffffda RBX: 00007f67d1f04038 RCX: 00007f67d1d746bc [ 260.570308][T15099] RDX: 000000000000000f RSI: 00007f67d17ff0b0 RDI: 000000000000000c [ 260.578267][T15099] RBP: 00007f67d17ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 260.586225][T15099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.594186][T15099] R13: 000000000000006e R14: 00007f67d1f04038 R15: 00007ffff62abc38 [ 260.602163][T15099] [ 260.709511][T15106] __nla_validate_parse: 14 callbacks suppressed [ 260.709532][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 260.773816][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'. [ 260.829452][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 260.858277][T15116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3387'. [ 261.224664][T15142] netlink: 'syz.1.3398': attribute type 10 has an invalid length. [ 261.299148][T15142] team0: Port device netdevsim0 added [ 261.337459][T15147] netlink: 'syz.1.3398': attribute type 10 has an invalid length. [ 261.426912][T15147] team0: Port device netdevsim0 removed [ 261.460715][T15147] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 261.487848][T15147] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 261.668707][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 261.719139][T15163] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3403'. [ 261.769992][T15169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3406'. [ 261.954055][T15177] bridge3: port 1(bridge_slave_1) entered disabled state [ 262.023166][T15177] bridge_slave_1: left promiscuous mode [ 262.038974][T15177] bridge3: port 1(bridge_slave_1) entered disabled state [ 262.122972][T15177] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 262.150493][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3409'. [ 262.670500][T15212] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 262.711663][T15212] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 262.804254][T15221] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3419'. [ 262.954754][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'. [ 263.303287][T15241] nbd: couldn't find a device at index 0 [ 263.536427][T15259] syz.3.3433[15259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.536718][T15259] syz.3.3433[15259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.573475][T15258] syz.3.3433[15258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.582351][T15264] bond_slave_0: entered promiscuous mode [ 263.593052][T15263] syz.3.3433[15263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.596432][T15264] bond_slave_1: entered promiscuous mode [ 263.604197][T15263] syz.3.3433[15263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.624349][T15264] macsec1: entered allmulticast mode [ 263.643770][T15264] bond0: entered allmulticast mode [ 263.666712][T15264] bond_slave_0: entered allmulticast mode [ 263.680279][T15264] bond_slave_1: entered allmulticast mode [ 263.713495][T15264] bond0: left allmulticast mode [ 263.739909][T15264] bond_slave_0: left allmulticast mode [ 263.757503][T15264] bond_slave_1: left allmulticast mode [ 263.773137][T15264] bond_slave_0: left promiscuous mode [ 263.778712][T15264] bond_slave_1: left promiscuous mode [ 264.063772][T15300] netlink: 'syz.4.3444': attribute type 1 has an invalid length. [ 264.085457][T15300] netlink: 'syz.4.3444': attribute type 1 has an invalid length. [ 264.105555][T15300] netlink: 'syz.4.3444': attribute type 2 has an invalid length. [ 264.178334][T15306] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 264.313157][T15319] FAULT_INJECTION: forcing a failure. [ 264.313157][T15319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.323778][T15318] xt_SECMARK: invalid mode: 0 [ 264.336885][T15319] CPU: 1 PID: 15319 Comm: syz.1.3454 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 264.347087][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.357161][T15319] Call Trace: [ 264.360461][T15319] [ 264.363409][T15319] dump_stack_lvl+0x241/0x360 [ 264.368116][T15319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.373342][T15319] ? __pfx__printk+0x10/0x10 [ 264.377979][T15319] ? __pfx_lock_release+0x10/0x10 [ 264.383025][T15319] ? __lock_acquire+0x1346/0x1fd0 [ 264.388087][T15319] should_fail_ex+0x3b0/0x4e0 [ 264.392792][T15319] _copy_from_user+0x2f/0xe0 [ 264.397492][T15319] do_ipv6_setsockopt+0x2f1/0x3630 [ 264.402636][T15319] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 264.408261][T15319] ? __pfx___might_resched+0x10/0x10 [ 264.413621][T15319] ? __lock_acquire+0x1346/0x1fd0 [ 264.418770][T15319] ? aa_sk_perm+0x967/0xab0 [ 264.423316][T15319] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.428289][T15319] ? __pfx_lock_acquire+0x10/0x10 [ 264.433359][T15319] ipv6_setsockopt+0x5c/0x1a0 [ 264.438091][T15319] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 264.444021][T15319] do_sock_setsockopt+0x3af/0x720 [ 264.449073][T15319] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 264.454622][T15319] ? __fget_files+0x29/0x470 [ 264.459217][T15319] ? __fget_files+0x3f6/0x470 [ 264.463909][T15319] __sys_setsockopt+0x1ae/0x250 [ 264.468766][T15319] __x64_sys_setsockopt+0xb5/0xd0 [ 264.473799][T15319] do_syscall_64+0xf3/0x230 [ 264.478329][T15319] ? clear_bhb_loop+0x35/0x90 [ 264.483038][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.489055][T15319] RIP: 0033:0x7f02e8175bd9 [ 264.493490][T15319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.513119][T15319] RSP: 002b:00007f02e7bff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.521635][T15319] RAX: ffffffffffffffda RBX: 00007f02e8303f60 RCX: 00007f02e8175bd9 [ 264.529625][T15319] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 264.537596][T15319] RBP: 00007f02e7bff0a0 R08: 00000000000004b8 R09: 0000000000000000 [ 264.545564][T15319] R10: 0000000020000a80 R11: 0000000000000246 R12: 0000000000000001 [ 264.553524][T15319] R13: 000000000000000b R14: 00007f02e8303f60 R15: 00007ffd1b58d7a8 [ 264.561597][T15319] [ 264.649173][T15333] netlink: 'syz.1.3459': attribute type 3 has an invalid length. [ 264.897983][T15347] bond1: entered promiscuous mode [ 264.915013][T15352] bond1 (unregistering): Released all slaves [ 265.078966][T15362] netlink: 'syz.4.3468': attribute type 20 has an invalid length. [ 265.273176][T15377] netlink: 'syz.4.3474': attribute type 64 has an invalid length. [ 265.551646][T15387] netlink: 'syz.3.3479': attribute type 9 has an invalid length. [ 265.595392][T15387] bond0: entered promiscuous mode [ 265.609771][T15387] bond_slave_0: entered promiscuous mode [ 265.615904][T15387] bond_slave_1: entered promiscuous mode [ 265.629396][T15387] batadv0: entered promiscuous mode [ 265.661742][T15387] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 265.681809][T15387] bond0: left promiscuous mode [ 265.691144][T15387] bond_slave_0: left promiscuous mode [ 265.706607][T15387] bond_slave_1: left promiscuous mode [ 265.712746][T15387] batadv0: left promiscuous mode [ 265.736934][T15407] __nla_validate_parse: 19 callbacks suppressed [ 265.736963][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3485'. [ 265.765112][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 265.800275][T15405] ipvlan2: entered allmulticast mode [ 265.806754][T15405] veth0_vlan: entered allmulticast mode [ 265.990721][ T5222] IPVS: starting estimator thread 0... [ 266.005735][T15418] netlink: 'syz.3.3488': attribute type 64 has an invalid length. [ 266.018519][T15418] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3488'. [ 266.034413][T15422] netlink: 'syz.1.3487': attribute type 1 has an invalid length. [ 266.107463][T15425] IPVS: using max 21 ests per chain, 50400 per kthread [ 266.190683][T15435] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3494'. [ 266.213883][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 266.232767][T15440] dccp_invalid_packet: P.Data Offset(4) too small [ 266.286924][T15442] netlink: 'syz.0.3498': attribute type 4 has an invalid length. [ 266.501753][T15455] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3503'. [ 266.613959][T15464] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 266.656731][T15464] vlan4: entered promiscuous mode [ 266.789539][T15477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3511'. [ 266.849531][T15483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3514'. [ 266.915400][T15489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3515'. [ 267.203075][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3525'. [ 267.232484][T15511] Cannot find del_set index 2 as target [ 267.752408][T15544] syz_tun: entered promiscuous mode [ 267.777807][T15544] macsec1: entered promiscuous mode [ 267.828021][T15544] syz_tun: left promiscuous mode [ 268.007840][T15563] bridge_slave_1: left allmulticast mode [ 268.037533][T15563] bridge_slave_1: left promiscuous mode [ 268.054185][T15563] bridge3: port 1(bridge_slave_1) entered disabled state [ 268.078445][T15563] bridge10: port 1(bridge_slave_1) entered blocking state [ 268.094762][T15563] bridge10: port 1(bridge_slave_1) entered disabled state [ 268.114505][T15563] bridge_slave_1: entered allmulticast mode [ 268.128719][T15563] bridge_slave_1: entered promiscuous mode [ 268.376376][T15585] ip6gretap0: entered promiscuous mode [ 268.408940][T15585] ip6gretap0: left promiscuous mode [ 268.476860][T15599] netlink: 'syz.4.3558': attribute type 11 has an invalid length. [ 269.473453][T15672] validate_nla: 8 callbacks suppressed [ 269.473471][T15672] netlink: 'syz.4.3580': attribute type 1 has an invalid length. [ 269.642292][T15681] veth0_vlan: left promiscuous mode [ 271.021316][T15767] __nla_validate_parse: 21 callbacks suppressed [ 271.021336][T15767] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3617'. [ 271.166607][T15776] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 271.217718][T15778] xfrm0: left allmulticast mode [ 271.237928][T15778] xfrm0: left promiscuous mode [ 271.301643][T15778] vlan1 (unregistering): left allmulticast mode [ 271.325172][T15778] team0: Port device vlan1 removed [ 271.500065][T15795] FAULT_INJECTION: forcing a failure. [ 271.500065][T15795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.527456][T15795] CPU: 1 PID: 15795 Comm: syz.3.3625 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 271.537658][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 271.547739][T15795] Call Trace: [ 271.551035][T15795] [ 271.553981][T15795] dump_stack_lvl+0x241/0x360 [ 271.558689][T15795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.563918][T15795] ? __pfx__printk+0x10/0x10 [ 271.568520][T15795] ? __pfx_lock_release+0x10/0x10 [ 271.573570][T15795] should_fail_ex+0x3b0/0x4e0 [ 271.578277][T15795] _copy_from_user+0x2f/0xe0 [ 271.582892][T15795] do_ip6t_set_ctl+0x73a/0x1270 [ 271.587777][T15795] ? __pfx___might_resched+0x10/0x10 [ 271.593076][T15795] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 271.598363][T15795] ? __pfx_lock_release+0x10/0x10 [ 271.603389][T15795] ? __mutex_unlock_slowpath+0x21d/0x750 [ 271.609020][T15795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.615002][T15795] ? __pfx_aa_sk_perm+0x10/0x10 [ 271.619941][T15795] nf_setsockopt+0x295/0x2c0 [ 271.624528][T15795] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 271.630503][T15795] do_sock_setsockopt+0x3af/0x720 [ 271.635616][T15795] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 271.641155][T15795] ? __fget_files+0x29/0x470 [ 271.645737][T15795] ? __fget_files+0x3f6/0x470 [ 271.650413][T15795] __sys_setsockopt+0x1ae/0x250 [ 271.655259][T15795] __x64_sys_setsockopt+0xb5/0xd0 [ 271.660278][T15795] do_syscall_64+0xf3/0x230 [ 271.664775][T15795] ? clear_bhb_loop+0x35/0x90 [ 271.669448][T15795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.675420][T15795] RIP: 0033:0x7f67d1d75bd9 [ 271.679823][T15795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.699425][T15795] RSP: 002b:00007f67d2a71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.707842][T15795] RAX: ffffffffffffffda RBX: 00007f67d1f03f60 RCX: 00007f67d1d75bd9 [ 271.715802][T15795] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 271.723762][T15795] RBP: 00007f67d2a710a0 R08: 00000000000004b8 R09: 0000000000000000 [ 271.731723][T15795] R10: 0000000020000a80 R11: 0000000000000246 R12: 0000000000000001 [ 271.739694][T15795] R13: 000000000000000b R14: 00007f67d1f03f60 R15: 00007ffff62abc38 [ 271.747670][T15795] [ 272.111522][T15815] xt_SECMARK: invalid mode: 0 [ 272.129202][T15816] netlink: 'syz.1.3630': attribute type 10 has an invalid length. [ 272.137175][ T29] audit: type=1107 audit(1720408178.592:7): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 272.247439][T15825] netlink: 'syz.1.3630': attribute type 8 has an invalid length. [ 272.334618][T15830] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 272.378238][T15835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3635'. [ 272.435568][T15835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3635'. [ 272.494262][T15840] netlink: 'syz.3.3638': attribute type 64 has an invalid length. [ 272.508827][T15840] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3638'. [ 272.555387][T15843] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3639'. [ 272.656929][T15849] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3641'. [ 272.714146][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3642'. [ 272.728819][T15844] veth0_vlan: left promiscuous mode [ 272.868518][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3643'. [ 272.964829][T15865] Cannot find add_set index 0 as target [ 273.105210][T15871] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 273.247949][T15879] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3651'. [ 273.412061][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3656'. [ 273.664723][T15908] vlan0: entered promiscuous mode [ 273.731957][T15913] netlink: 'syz.3.3662': attribute type 4 has an invalid length. [ 273.834685][T15916] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 274.007435][T15930] netlink: 'syz.0.3672': attribute type 1 has an invalid length. [ 274.070033][T15926] batadv0: Device is already in use. [ 274.387984][T15955] nbd: socks must be embedded in a SOCK_ITEM attr [ 274.548959][T15962] macvlan2: entered allmulticast mode [ 274.831478][T15982] syzkaller1: entered promiscuous mode [ 274.847578][T15982] syzkaller1: entered allmulticast mode [ 274.905729][T15989] veth1_macvtap: left allmulticast mode [ 274.925209][T15989] veth1_macvtap: left promiscuous mode [ 274.980968][T15984] veth1_macvtap: entered promiscuous mode [ 274.991622][T15984] veth1_macvtap: entered allmulticast mode [ 275.007625][T15984] macsec0: left promiscuous mode [ 275.012779][T15984] macsec0: left allmulticast mode [ 275.025987][T15984] veth1_macvtap: left allmulticast mode [ 275.167922][T16002] netlink: 'syz.0.3697': attribute type 4 has an invalid length. [ 275.274793][T16008] nbd: couldn't find a device at index 0 [ 275.276840][T16005] bridge10: entered promiscuous mode [ 275.291913][T16005] bridge10: entered allmulticast mode [ 275.343454][T16011] syz_tun: entered promiscuous mode [ 275.363371][T16011] syz_tun: left promiscuous mode [ 275.418527][T16015] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 275.828366][T16045] netlink: 'syz.2.3717': attribute type 4 has an invalid length. [ 276.142299][T16067] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 276.318624][T16073] __nla_validate_parse: 13 callbacks suppressed [ 276.318645][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3728'. [ 276.336118][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 276.590303][T16085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3731'. [ 276.722221][T16093] netlink: 494 bytes leftover after parsing attributes in process `syz.1.3734'. [ 276.753182][T16092] netlink: 494 bytes leftover after parsing attributes in process `syz.1.3734'. [ 276.836309][T16104] netlink: 'syz.3.3737': attribute type 11 has an invalid length. [ 276.900515][T16106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3738'. [ 277.049619][T16117] tipc: Started in network mode [ 277.054542][T16117] tipc: Node identity 2d14142a, cluster identity 4711 [ 277.080801][T16117] tipc: Enabling of bearer rejected, failed to enable media [ 277.096623][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 277.126534][T16123] netlink: 'syz.0.3745': attribute type 4 has an invalid length. [ 277.329816][T16137] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3743'. [ 277.341586][T16139] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3751'. [ 277.351239][T16137] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3743'. [ 277.589731][T16157] nbd: couldn't find a device at index 0 [ 277.846012][ C1] Unknown status report in ack skb [ 278.286596][T16200] netlink: 'syz.3.3770': attribute type 49 has an invalid length. [ 278.311284][T16200] netlink: 'syz.3.3770': attribute type 49 has an invalid length. [ 278.385331][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 278.516269][T16214] veth2: entered promiscuous mode [ 278.523603][T16214] veth2: entered allmulticast mode [ 278.608550][T16224] openvswitch: netlink: Key type 9560 is out of range max 32 [ 278.820929][T16238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 278.852436][T16243] Dead loop on virtual device ip6_vti0, fix it urgently! [ 278.932135][T16248] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 278.965839][T16248] netlink: 'syz.1.3788': attribute type 3 has an invalid length. [ 278.988189][T16248] netlink: 'syz.1.3788': attribute type 3 has an invalid length. [ 279.456496][T16288] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 279.524039][T16292] netlink: 'syz.4.3805': attribute type 3 has an invalid length. [ 280.113660][T16322] netlink: 'syz.2.3818': attribute type 3 has an invalid length. [ 280.125167][T16322] netlink: 'syz.2.3818': attribute type 3 has an invalid length. [ 280.243362][T16332] xt_SECMARK: invalid mode: 0 [ 280.244674][T16328] netlink: 'syz.0.3819': attribute type 1 has an invalid length. [ 280.286811][T16328] nbd: error processing sock list [ 280.645416][T16351] netlink: 'syz.1.3826': attribute type 20 has an invalid length. [ 280.782662][T16362] netlink: 'syz.0.3831': attribute type 10 has an invalid length. [ 280.788823][ T29] audit: type=1107 audit(1720408187.242:8): pid=16360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 280.855534][T16362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.894787][T16362] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 280.945128][T16362] netlink: 'syz.0.3831': attribute type 8 has an invalid length. [ 281.132395][T16383] netlink: 'syz.1.3837': attribute type 64 has an invalid length. [ 281.297518][T16393] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 281.408671][T16392] __nla_validate_parse: 24 callbacks suppressed [ 281.408693][T16392] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3842'. [ 281.485920][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3845'. [ 281.532694][T16410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3846'. [ 281.695478][T16423] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3852'. [ 281.765544][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 281.980381][T16432] xt_cgroup: invalid path, errno=-2 [ 282.010158][T16438] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3858'. [ 282.014823][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 282.294783][T16459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3863'. [ 282.394009][T16465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3865'. [ 282.482428][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3867'. [ 282.650060][T16479] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 282.749613][T16486] ================================================================== [ 282.758587][T16486] BUG: KASAN: slab-use-after-free in dev_map_enqueue+0x40/0x3e0 [ 282.766509][T16486] Read of size 8 at addr ffff88801b7a9400 by task syz.2.3870/16486 [ 282.774442][T16486] [ 282.776808][T16486] CPU: 0 PID: 16486 Comm: syz.2.3870 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 282.786994][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 282.797079][T16486] Call Trace: [ 282.800371][T16486] [ 282.803303][T16486] dump_stack_lvl+0x241/0x360 [ 282.807989][T16486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.813192][T16486] ? __pfx__printk+0x10/0x10 [ 282.817789][T16486] ? _printk+0xd5/0x120 [ 282.821940][T16486] ? __virt_addr_valid+0x183/0x520 [ 282.827241][T16486] ? __virt_addr_valid+0x183/0x520 [ 282.832362][T16486] print_report+0x169/0x550 [ 282.836889][T16486] ? __virt_addr_valid+0x183/0x520 [ 282.842002][T16486] ? __virt_addr_valid+0x183/0x520 [ 282.847112][T16486] ? __virt_addr_valid+0x44e/0x520 [ 282.852240][T16486] ? __phys_addr+0xba/0x170 [ 282.856827][T16486] ? dev_map_enqueue+0x40/0x3e0 [ 282.864373][T16486] kasan_report+0x143/0x180 [ 282.868878][T16486] ? bpf_xdp_adjust_tail+0x70/0x200 [ 282.874089][T16486] ? dev_map_enqueue+0x40/0x3e0 [ 282.878943][T16486] dev_map_enqueue+0x40/0x3e0 [ 282.883926][T16486] ? bpf_xdp_adjust_tail+0x1a7/0x200 [ 282.889222][T16486] xdp_do_redirect_frame+0x2a6/0x660 [ 282.894555][T16486] bpf_test_run_xdp_live+0xe60/0x1e60 [ 282.899942][T16486] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 282.905501][T16486] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 282.911337][T16486] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 282.917254][T16486] ? __might_fault+0xaa/0x120 [ 282.922041][T16486] ? __might_fault+0xc6/0x120 [ 282.926838][T16486] ? _copy_from_user+0xa6/0xe0 [ 282.931662][T16486] ? bpf_test_init+0x15a/0x180 [ 282.936558][T16486] ? xdp_convert_md_to_buff+0x5b/0x330 [ 282.942132][T16486] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 282.947515][T16486] ? __pfx_lock_release+0x10/0x10 [ 282.952543][T16486] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 282.958356][T16486] ? __fget_files+0x29/0x470 [ 282.962948][T16486] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 282.968751][T16486] bpf_prog_test_run+0x33a/0x3b0 [ 282.973690][T16486] __sys_bpf+0x48d/0x810 [ 282.978209][T16486] ? __pfx___sys_bpf+0x10/0x10 [ 282.982987][T16486] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.988963][T16486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.995367][T16486] ? do_syscall_64+0x100/0x230 [ 283.000132][T16486] __x64_sys_bpf+0x7c/0x90 [ 283.004543][T16486] do_syscall_64+0xf3/0x230 [ 283.009493][T16486] ? clear_bhb_loop+0x35/0x90 [ 283.014168][T16486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.020055][T16486] RIP: 0033:0x7f8583b75bd9 [ 283.024459][T16486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.044055][T16486] RSP: 002b:00007f8584873048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.052465][T16486] RAX: ffffffffffffffda RBX: 00007f8583d04110 RCX: 00007f8583b75bd9 [ 283.060946][T16486] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 283.069011][T16486] RBP: 00007f8583be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 283.077181][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.085159][T16486] R13: 000000000000006e R14: 00007f8583d04110 R15: 00007ffdebaddb18 [ 283.093140][T16486] [ 283.096199][T16486] [ 283.098511][T16486] Allocated by task 7958: [ 283.102821][T16486] kasan_save_track+0x3f/0x80 [ 283.107508][T16486] __kasan_kmalloc+0x98/0xb0 [ 283.112179][T16486] kmalloc_trace_noprof+0x19c/0x2c0 [ 283.117390][T16486] alloc_fdtable+0xa1/0x280 [ 283.121900][T16486] dup_fd+0x893/0xce0 [ 283.125886][T16486] copy_files+0x150/0x2a0 [ 283.130208][T16486] copy_process+0x171b/0x3dc0 [ 283.135000][T16486] kernel_clone+0x226/0x8f0 [ 283.139517][T16486] __x64_sys_clone+0x258/0x2a0 [ 283.144282][T16486] do_syscall_64+0xf3/0x230 [ 283.148793][T16486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.154708][T16486] [ 283.157029][T16486] Freed by task 14880: [ 283.161175][T16486] kasan_save_track+0x3f/0x80 [ 283.165845][T16486] kasan_save_free_info+0x40/0x50 [ 283.170885][T16486] poison_slab_object+0xe0/0x150 [ 283.175822][T16486] __kasan_slab_free+0x37/0x60 [ 283.180583][T16486] kfree+0x149/0x360 [ 283.184490][T16486] put_files_struct+0x2e9/0x360 [ 283.189335][T16486] do_exit+0xa08/0x27e0 [ 283.193487][T16486] do_group_exit+0x207/0x2c0 [ 283.198067][T16486] get_signal+0x16a1/0x1740 [ 283.202560][T16486] arch_do_signal_or_restart+0x96/0x860 [ 283.208097][T16486] syscall_exit_to_user_mode+0xc9/0x360 [ 283.213719][T16486] do_syscall_64+0x100/0x230 [ 283.218301][T16486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.224186][T16486] [ 283.226493][T16486] The buggy address belongs to the object at ffff88801b7a9400 [ 283.226493][T16486] which belongs to the cache kmalloc-cg-64 of size 64 [ 283.240706][T16486] The buggy address is located 0 bytes inside of [ 283.240706][T16486] freed 64-byte region [ffff88801b7a9400, ffff88801b7a9440) [ 283.254253][T16486] [ 283.256586][T16486] The buggy address belongs to the physical page: [ 283.263007][T16486] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b7a9 [ 283.271805][T16486] memcg:ffff88802361f801 [ 283.276055][T16486] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 283.283201][T16486] page_type: 0xffffefff(slab) [ 283.287904][T16486] raw: 00fff00000000000 ffff88801504dc80 ffffea0000946d80 dead000000000004 [ 283.296584][T16486] raw: 0000000000000000 0000000080200020 00000001ffffefff ffff88802361f801 [ 283.305593][T16486] page dumped because: kasan: bad access detected [ 283.312007][T16486] page_owner tracks the page as allocated [ 283.317708][T16486] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 6140828986, free_ts 0 [ 283.335234][T16486] post_alloc_hook+0x1f3/0x230 [ 283.340014][T16486] get_page_from_freelist+0x2e4c/0x2f10 [ 283.345567][T16486] __alloc_pages_noprof+0x256/0x6c0 [ 283.350786][T16486] alloc_slab_page+0x5f/0x120 [ 283.355553][T16486] allocate_slab+0x5a/0x2f0 [ 283.360046][T16486] ___slab_alloc+0xcd1/0x14b0 [ 283.364734][T16486] __slab_alloc+0x58/0xa0 [ 283.369242][T16486] __kmalloc_node_noprof+0x286/0x440 [ 283.374532][T16486] kvmalloc_node_noprof+0x72/0x190 [ 283.379683][T16486] nf_hook_entries_grow+0x288/0x720 [ 283.384925][T16486] __nf_register_net_hook+0x278/0x8d0 [ 283.390323][T16486] nf_register_net_hook+0xb0/0x190 [ 283.395645][T16486] nf_register_net_hooks+0x41/0x1a0 [ 283.400847][T16486] ops_init+0x359/0x610 [ 283.405005][T16486] register_pernet_operations+0x2cb/0x660 [ 283.410718][T16486] register_pernet_subsys+0x28/0x40 [ 283.415923][T16486] page_owner free stack trace missing [ 283.421369][T16486] [ 283.423685][T16486] Memory state around the buggy address: [ 283.429304][T16486] ffff88801b7a9300: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 283.437441][T16486] ffff88801b7a9380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 283.445488][T16486] >ffff88801b7a9400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 283.453534][T16486] ^ [ 283.457588][T16486] ffff88801b7a9480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 283.465642][T16486] ffff88801b7a9500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 283.473770][T16486] ================================================================== [ 283.482080][T16486] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 283.489496][T16486] CPU: 0 PID: 16486 Comm: syz.2.3870 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 283.499747][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 283.509820][T16486] Call Trace: [ 283.513383][T16486] [ 283.516409][T16486] dump_stack_lvl+0x241/0x360 [ 283.521128][T16486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.526370][T16486] ? __pfx__printk+0x10/0x10 [ 283.530998][T16486] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.537023][T16486] ? vscnprintf+0x5d/0x90 [ 283.541383][T16486] panic+0x349/0x860 [ 283.545311][T16486] ? check_panic_on_warn+0x21/0xb0 [ 283.550499][T16486] ? __pfx_panic+0x10/0x10 [ 283.554952][T16486] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 283.560872][T16486] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 283.566830][T16486] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.573204][T16486] check_panic_on_warn+0x86/0xb0 [ 283.578174][T16486] ? dev_map_enqueue+0x40/0x3e0 [ 283.583064][T16486] end_report+0x77/0x160 [ 283.587431][T16486] kasan_report+0x154/0x180 [ 283.592236][T16486] ? bpf_xdp_adjust_tail+0x70/0x200 [ 283.597494][T16486] ? dev_map_enqueue+0x40/0x3e0 [ 283.602458][T16486] dev_map_enqueue+0x40/0x3e0 [ 283.607159][T16486] ? bpf_xdp_adjust_tail+0x1a7/0x200 [ 283.612461][T16486] xdp_do_redirect_frame+0x2a6/0x660 [ 283.617765][T16486] bpf_test_run_xdp_live+0xe60/0x1e60 [ 283.623422][T16486] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 283.628988][T16486] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 283.634828][T16486] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 283.640737][T16486] ? __might_fault+0xaa/0x120 [ 283.645413][T16486] ? __might_fault+0xc6/0x120 [ 283.650092][T16486] ? _copy_from_user+0xa6/0xe0 [ 283.654864][T16486] ? bpf_test_init+0x15a/0x180 [ 283.659678][T16486] ? xdp_convert_md_to_buff+0x5b/0x330 [ 283.665175][T16486] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 283.670698][T16486] ? __pfx_lock_release+0x10/0x10 [ 283.675750][T16486] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 283.681573][T16486] ? __fget_files+0x29/0x470 [ 283.686192][T16486] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 283.692003][T16486] bpf_prog_test_run+0x33a/0x3b0 [ 283.697204][T16486] __sys_bpf+0x48d/0x810 [ 283.701461][T16486] ? __pfx___sys_bpf+0x10/0x10 [ 283.706230][T16486] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.712225][T16486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.718586][T16486] ? do_syscall_64+0x100/0x230 [ 283.723347][T16486] __x64_sys_bpf+0x7c/0x90 [ 283.727830][T16486] do_syscall_64+0xf3/0x230 [ 283.732433][T16486] ? clear_bhb_loop+0x35/0x90 [ 283.737144][T16486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.743079][T16486] RIP: 0033:0x7f8583b75bd9 [ 283.747524][T16486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.767498][T16486] RSP: 002b:00007f8584873048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.775937][T16486] RAX: ffffffffffffffda RBX: 00007f8583d04110 RCX: 00007f8583b75bd9 [ 283.783927][T16486] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 283.791912][T16486] RBP: 00007f8583be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 283.799899][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.807871][T16486] R13: 000000000000006e R14: 00007f8583d04110 R15: 00007ffdebaddb18 [ 283.815867][T16486] [ 283.819031][T16486] Kernel Offset: disabled [ 283.823353][T16486] Rebooting in 86400 seconds..