last executing test programs: 7m44.647303779s ago: executing program 3 (id=4612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000d0a01030000000000000000050000070900020073797b32000000000900020073797a3200000000f4000440000000000900010073797a30000000000800044000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x88, @loopback, 0x79ff}, @in6={0xa, 0x4e20, 0x81, @mcast1, 0x1}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r5, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000000000000000140004f5000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r9, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="00082abd7000fcdbcf25030000000800020007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000bd"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_MON_SET(r11, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000e40)=ANY=[@ANYBLOB="34030000", @ANYRES8=r8, @ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x4884}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000044) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) 7m21.922918406s ago: executing program 3 (id=4621): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 7m21.899190832s ago: executing program 3 (id=4630): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="060000005c85cb2080365083000000001200000000000000"], 0x0, 0x26, 0x3e, 0xfffffffc, 0x40}, 0x28) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x82, 0x200, 0x1}, 0xf) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00ab1ba71b0100001b00000000000000000008000200ff3f31d2df561affffff0800"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x64, 0x0, 0x11, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp_addr={0x44, 0x3c, 0x2e, 0x1, 0x4, [{@rand_addr=0x64010101, 0x1}, {@remote, 0xad9}, {@rand_addr=0x64010102, 0xfff}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf6b}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xad, 0x1, 0x3, [{@multicast1, 0xfffffffd}, {@local, 0x9}, {@rand_addr=0x64010101, 0x10001}]}, @timestamp_prespec={0x44, 0x1c, 0x1c, 0x3, 0x5, [{@private=0xa010102, 0x637}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xfffffffb}]}, @timestamp={0x44, 0x18, 0xb5, 0x0, 0x4, [0x80, 0x7, 0x1ff, 0xfffffffa, 0x1000]}, @timestamp={0x44, 0x1c, 0x2d, 0x0, 0x0, [0xbb, 0x7, 0x9, 0xb065, 0x6, 0x400]}]}}}}}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@newlinkprop={0x38, 0x6c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x10000, 0x20}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) 7m21.8354119s ago: executing program 3 (id=4632): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000480)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x17, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) 7m21.673411693s ago: executing program 3 (id=4636): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES16=r2, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r0, @ANYBLOB="08000400b9080000"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000007f80)={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, @private0, 0x5, 0x0, 0xd9, 0x580, 0x400000000000001, 0x40000100}) 7m21.509047132s ago: executing program 3 (id=4640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000240)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000380)=@srh={0x32, 0xc, 0x4, 0x6, 0x6, 0x10, 0x80, [@private0, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @empty, @mcast1]}, 0x68) r4 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) 7m6.438036539s ago: executing program 32 (id=4640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000240)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000380)=@srh={0x32, 0xc, 0x4, 0x6, 0x6, 0x10, 0x80, [@private0, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @empty, @mcast1]}, 0x68) r4 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) 9.235399991s ago: executing program 0 (id=9137): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x20, 0x8, 0x3, 0xe, {{0x24, 0x4, 0x2, 0x0, 0x90, 0x65, 0x0, 0x7, 0x6, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x36, 0x3, [{0x7, 0x3, "15"}, {0x0, 0x8, "dfa56aa623a8"}, {0x2, 0xd, "8b04f66c5e6c16fc71dd3a"}, {0x1, 0xe, "c2cd67657f9e2b34f0c69eeb"}, {0x7, 0x5, 'yp\v'}, {0x2, 0x5, "295fc1"}]}, @generic={0x86, 0xa, "c39d5e68e5ae65ec"}, @ssrr={0x89, 0x1b, 0xb3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @multicast1, @local, @remote]}, @cipso={0x86, 0x18, 0x2, [{0x0, 0x4, "86d6"}, {0x2, 0x5, "f752f9"}, {0x7, 0x9, "373bf2fa9c8476"}]}, @lsrr={0x83, 0x7, 0xc3, [@empty]}]}}}}}) 9.091483195s ago: executing program 0 (id=9141): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x1, 0x200, {{0x8, 0x4, 0x2, 0x1, 0x20, 0x67, 0x0, 0xff, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0xa7, [@local, @broadcast]}]}}}}}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delqdisc={0x3c, 0x25, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x2, 0x4}, {0x8, 0xffe0}, {0xb, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0xb, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 8.751238808s ago: executing program 0 (id=9144): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000000)) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f00000010c0)='*', 0x1}, {&(0x7f0000002100)="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", 0xf01}], 0x2, 0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x10000000000066, 0xa) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x4}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xeb2}, @in6={0xa, 0x4e21, 0x7fffffff, @local, 0x9}, @in6={0xa, 0x4e21, 0x5, @private1, 0xa7d}]}, &(0x7f0000000180)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES8=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000580)) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) (async) writev(r10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="accab7308ab1f3ca8b342ada563dce2cdef9d9a0bd123a6909d3941a79f65ff3cf937b4cefbed540562d94aaf6093cb09089", 0x32}, {&(0x7f0000000300)="5d20735f64c6aa982e87", 0xa}, {&(0x7f0000000380)="e57784c7baff332c5b2c3bc64a2962a4b753eb754a286a25dc35f09f97d627b4d6f2000033ffdc69e7536d400a6ae339b3fcd3e396ee9a42b66c29246945bd17f3382b5e9bb2becfd01626a2c0f2cbae257b69386dc1edfc4ae8e08dddb9d1ba7235f0d21599795c840b8ed934e5d4d3ce0f438ba5b323ca0138c6146a3b6f43fcc990efe60c8671639ea0f30e3fc61026a56572ed4c8b0e1af01b42e8c950320191581814c37be36427a91d88edacacd91f16a086546c25fb336e681d7a1fb4c2fde5cb07193d5288bad88e47bd0c86d285d5db3a807384628425", 0xdb}, {&(0x7f00000005c0)="04fcaf05f3adbda7092fe15ccd1c02a2e33dac808a65a1bf0b21256e46906557fc11f7e7bb3ff1555f332b1b941875ebcd4ddcc392ddd43b18d9da840d3f2a6f576e6d7ba2d42543398c983aa57cc4c810813c96571540e124881b03e5d6d65e9937e9db863628b451180053caf3c9518f6c6e587ccd016a2ab3cc1f67c3323a75f63af3d3026cce29f31f6f7ea922ed6db5ec2d", 0x94}, {&(0x7f0000000680)="e8ce2a986870b2fdf776947e73f260b11d888e4c3fb736a793ea0ae17637318e57fb8c044b74ed2df374c71dbb5bf093d82baec1ca7a4ac19f4c8f03eca86cd7cf6246ba1f93fb8ac1489880b356c30d048267d49a791b6dee5ca22c4c679048ab17ce11fb28cd4b21b6847d667586a8606f42b431c2db6c0868300e2a8ddd3d2e16cda71231056f935b8ccd2b552d55960fb932110d228667e8db94f338a7aa881818c3988152d92b2c74e4f32036cd359685df07e6b1ed94b3be29fe6ba804613566719c", 0xc5}, {&(0x7f0000000780)="c682444f82c1935cb9068902d15e542b932dd4ab7e81bb550670fab91f08606b221293d23c5c86de970a460d609693f5377c", 0x32}], 0x6) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x40, 0x0, &(0x7f00000001c0)=0x54) (async) r12 = socket$kcm(0x2, 0xa, 0x2) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) r14 = accept4$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f0000000540)={r6, 0x5}, 0x8) 8.562817704s ago: executing program 0 (id=9150): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0xffffffff}}]]}, {0x3}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=@gettaction={0x30, 0x32, 0x301, 0x70bd2b, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.184358045s ago: executing program 0 (id=9154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 7.979727182s ago: executing program 0 (id=9158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfcbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0xf}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r7 = socket(0x10, 0x3, 0x2) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r8, 0x29, 0xcf, 0x0, 0x4) close(r6) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r7, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d", 0x2}], 0x1}}], 0x1, 0x40060) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) close(r9) syz_emit_ethernet(0x21, &(0x7f0000001a40)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e3", "dc094a", 0x22eb, "81b5be3181fd3b87d0a0a7"}}}}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x14, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.80020651s ago: executing program 2 (id=9198): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) socketpair(0x11, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000240)=0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffd, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000001e40)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'erspan0\x00', r10, 0x8, 0x7800, 0x7ff, 0x8d, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x66, 0x0, 0x8, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x17, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x8c, 0x3, 0x5, [{@remote, 0x2}, {@private=0xa010101, 0xfffffffb}, {@empty, 0x3}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x7fff}]}]}}}}}) bind$xdp(r9, &(0x7f00000004c0)={0x2c, 0x3, r11, 0x29}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbf544000038000000000001a978ac1e92ffffffffffffff90781200183f2500000000000000000100007f0000017f00000100186371aeef1c03000000000000"], 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) 3.532216088s ago: executing program 4 (id=9200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) 3.422453914s ago: executing program 4 (id=9201): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8) 3.293223179s ago: executing program 4 (id=9202): socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2b, 0x25dddbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000841) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 2.339842993s ago: executing program 5 (id=9203): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c", @ANYBLOB="5f711275f835c9e66a12abc7c7421ec2879d6cc4d9", @ANYRES64=r0, @ANYBLOB="fdc4c09df8df05649a43ff7793f532eda50684ca2f1d5e91963fadc88530f92af12532c46708067f6e6ac07b36586a4d899da5d80aa6d0cb94746a41b799e318e91b4cb1b543bd351da338f8a05279f6d5688453234cb685f241bd5b54955a7c884b85546f53fac17887f0dc8a1ab2cb267cd758c53c87f98504ad8ea1697d48a78f09db079c69ce02e36ba45a3a1005b436ab66de27e1d278826b92a7c0a34452244e02d2a6cce25f58a3516558653e65e8b2ecddf270"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r1, 0x29, 0xd3, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={'dvmrp1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.228001933s ago: executing program 2 (id=9204): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000309010200000000000000e1ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeeb, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0xc00, 0x0, 0x0, {0xa}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8000}]}}], {0x14}}, 0xd0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x8}, 0x50) 2.108724903s ago: executing program 4 (id=9205): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) connect$unix(r1, 0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x10000000}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 2.027813001s ago: executing program 5 (id=9206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, '\xe0.+.$\'[$'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '\x11(%!^@\xfe'}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) r4 = accept$phonet_pipe(r2, &(0x7f0000000280), &(0x7f00000002c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) close(r2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1200002}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@deltaction={0x130, 0x31, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcb48}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x93d}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x60008890}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000580)=0x2, 0x4) close(r7) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'netpci0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000800)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x3, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x40) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000000a40)={r10, &(0x7f0000000940)='xt\x00', 0x840, &(0x7f0000000980)={@align=0x28000000000000, {0x3, 0x1f10, 0x2, 0x4}}, 0x8, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0xffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0, 0x67, &(0x7f0000000d00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x0, 0xa, &(0x7f0000000f40)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @ldst={0x3, 0x0, 0x3, 0x0, 0x9, 0xfffffffffffffffc, 0x8}, @alu={0x7, 0x0, 0x6, 0xa, 0x5, 0x50, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0xff}], &(0x7f0000000fc0)='GPL\x00', 0xee6, 0x0, 0x0, 0x41000, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001040)={0x5, 0x10, 0xffffff00, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001080)=[{0x3, 0x3, 0xc, 0xc}, {0x4, 0x1, 0xa, 0x5}], 0x10, 0xb34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x19, 0x1e, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x12, 0x0, 0x0, 0x40f00, 0x2, '\x00', r6, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x3, 0x1, 0xa, 0x1}, 0x10, r13, r14, 0x0, &(0x7f0000001180)}, 0x94) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f0000001280), &(0x7f00000012c0)=0x4) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r15, 0x801c581f, &(0x7f0000001340)={0x400, 0x3, 0x3, 0x6, 0x19f8d249}) ioctl$PPPIOCATTCHAN(r16, 0x40047438, &(0x7f0000001380)=0x3) 1.901173555s ago: executing program 5 (id=9208): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r0, 0x4004743b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB='\t\r'], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x68, &(0x7f0000000200)}, 0x10) bind$ax25(r3, &(0x7f0000000080)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @null, @default, @null, @default]}, 0x48) 1.892015517s ago: executing program 4 (id=9209): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x16, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3"}}, 0x24) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r7, 0xf5f) accept(r7, 0x0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 1.833104879s ago: executing program 2 (id=9210): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.784253005s ago: executing program 1 (id=9211): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000000c0)=0x8, 0x8) 1.571642468s ago: executing program 1 (id=9212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000300", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1f}, 0x90) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xc8}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) recvmsg(r6, &(0x7f0000000c40)={&(0x7f00000002c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f0000000a40)=""/190, 0xbe}], 0x2, &(0x7f0000000b80)=""/168, 0xa8}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r9 = socket(0xa, 0x3, 0x10001) sendmmsg$inet(r9, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {0x0, 0xb00}], 0x3}}], 0x1, 0x0) bind$llc(r8, &(0x7f0000000080), 0x10) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 1.557512345s ago: executing program 5 (id=9213): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x400e0}, 0x4004000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000c14}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffb0900030073797a32000000000900010073797a300000000008000a400000000420000000080a01080000000000000000010000000900010073797a30"], 0x9c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0xe4, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x400, 0x4400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0xb0, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x10}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, @AF_INET6={0x64, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x2256}, {0x8, 0xf, 0x0, 0x0, 0x5}]}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.399632722s ago: executing program 2 (id=9214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xb, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0xb9, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r7, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_deladdr={0x60, 0x15, 0x2, 0x70bd2d, 0x25dfdbfc, {0xa, 0x1, 0xd6, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x2f, &(0x7f0000000040), 0x3b) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0xfffffed0}}, 0x0) 1.394559403s ago: executing program 5 (id=9215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000200)}, 0x20) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000700)={0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000900)={r2, &(0x7f0000000800)='\x00', 0x10000, &(0x7f0000000840)={@align=0x8, {0x0, 0x7, 0x401, 0x2}}, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x80000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffa}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x4, 0x7ff, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000940)=[r0, r6, r0, r0], &(0x7f0000000980)=[{0x2, 0x1, 0x2, 0x9}, {0x3, 0x4, 0xc, 0x7}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.198115448s ago: executing program 1 (id=9216): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0xe4ffffffffffffff}, 0x440b0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000680)=0xcc9, 0x3) 1.110072532s ago: executing program 5 (id=9217): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x4044884) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) recvmsg$can_bcm(r2, &(0x7f0000000a40)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/193, 0xc1}], 0x1, &(0x7f00000009c0)=""/9, 0x9}, 0x101) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r3, 0x0, 0x0) read(r3, 0x0, 0x0) write$ppp(r3, &(0x7f00000002c0)="d16d", 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) r4 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x10c, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8c, 0xa8, @random="39fd96ae37b0d3e3803e6425d07101bb9de72449fffe4aa31f647a28a21596c951ef892241985e7ef9ec260617f8135ff202751b3a6a8a31e7ab7229b84b076df97f81b58924e77c0b2596b0e00e1dc71731c4c75dc1d89a4b53562b86d4e4346f0ba9ae3fcec4f40ab74709b2c3f12721319d3fa9e2f7b0d4a6c61b610ba8043b97beb99be90afd"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x92) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x54, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0xfffffffffffffd18, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_USERDATA={0x8, 0xd, 0x1, 0x0, "7f5f0986"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffe01}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x0, 0x3, 0x1, 0x0, 0x40}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWRULE={0x128, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, {0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x46, 0x7, 0x1, 0x0, "a9b7fe3ef3a2cf0d56b14fdd7299cdfd3957ce6754db15f05e67e5a31c187f275af96b2f903f2e69c56efe9f2b67512e259df7bf402339353151b10d261fdde896c2"}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x600, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_USERDATA={0x66, 0xc, "32948683082900236f835460d81121c2140d082aaeb6c7062391f0e0d4db1f59335a364c1ebbc2ce133f26ad1686aab8824090379073aa094d9742b62495a4ddf3755b15f9e069e584c7e3802f2a0d218f94c50e28315fa1a104e822b66e2d557600"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x368}}, 0x0) 797.569726ms ago: executing program 2 (id=9218): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fedbdf2501000000080001004c00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000004000"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x48011) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) 493.345667ms ago: executing program 1 (id=9219): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000309010200000000000000e1ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeeb, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6(0xa, 0x80001, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000240)={0x77b4, 0x9, 0x518, 0x8}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 400.420579ms ago: executing program 2 (id=9220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x1, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x3c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pim6reg0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r9, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) sendfile(r4, r2, 0x0, 0x5) 321.511825ms ago: executing program 4 (id=9221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000002180)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000500000062000000891476657468305f6d6163767461702aae0000006e6963766630000000000000000000006e65747063693000000000000000000067726530000000000000000000000000ffffffffffffffff00ff8000aaaaaaaaaabb00000000ff806e0000006e0000009e000000000000000000000000000000000000001f0000000000000000000000000000000800000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000"]}, 0x1a6) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001"], 0x64}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r8, 0x29, 0xd1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=r8, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRESHEX=r2, @ANYRES16=r8], 0x58}}, 0x48004) 215.253591ms ago: executing program 1 (id=9222): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r0, 0x0, 0xed, 0x0, &(0x7f0000000040)="10f115d8e5bd6d8011a53de8111a2b1213bb2c5d30dde7275fee7bedab3c95c2ce8834b010dbdb68b3b11ff3aaed816c8cca695f23190c4c50a38e2f194e7b8cfbec3217df78cf0d4825311065e37448702308e0a7a4177a2d376ee6ce79abee50b14910649666165e24ddb422421cdf4f28c527752a4108f35502a228c9e1b1c042441d4a3de446a2829555e272fb260857a89e656fdbb86a93b6cef83a76f8a3bb0a41ee0f049fe426c69563ebe61b64fbf2d005a836b5345460ec4d3ce5897b44ca9c6c87b1a966d1cebcfea6aee62ab3f03bad090b6dfc1e887abf7faa2107bccb69afc4cac8a71c14047c", 0x0, 0xfffffffd, 0x0, 0x8e, 0x0, &(0x7f0000000140)="ed9f49d1edc405779c860c14c774dd3c28fef9195f47b0b4a6a5be4a04f2eea1bd1a4214a49accd01584304115bd48d4c1cbffd6e401dda9a0db590960739be2f404fedc2d2c9e05744a1c563695b1b3765b8331c7441524887be4fd8482eaae071352b6ffea6e6191abba7190d2def6b2c3219dd9140f2ab29c80b3897ac0ffa9af8f5133769d76a2ce89df340b", 0x0, 0x2, 0x0, 0x3}, 0x50) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) (rerun: 32) 0s ago: executing program 1 (id=9223): socketpair$tipc(0x1e, 0x3cc55ce151aab05c, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r4, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) close(r1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000304000000000000000100000000", @ANYRES32=0x0, @ANYRESHEX=r2], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) kernel console output (not intermixed with test programs): [ T2251] bridge1: port 1(erspan0) entered forwarding state [ 846.197580][ T2260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 846.409690][ T2281] netlink: 'syz.5.8149': attribute type 1 has an invalid length. [ 846.451110][ T2281] bond0: entered promiscuous mode [ 846.457594][ T2281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.531676][ T2280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8150'. [ 846.559513][ T2280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8150'. [ 846.606564][ T2285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8150'. [ 846.751187][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.905786][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 846.913876][ C0] lec:lec_tx_timeout: lec0 [ 846.918593][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 847.073608][ T2311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8158'. [ 847.159220][ T2319] Bluetooth: MGMT ver 1.23 [ 847.182839][ T2319] netlink: 'syz.4.8160': attribute type 21 has an invalid length. [ 847.200293][ T2322] netlink: 'syz.1.8162': attribute type 1 has an invalid length. [ 847.248773][ T2319] bond21: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 847.285177][ T2319] bond21 (unregistering): Released all slaves [ 847.412557][ T2322] bond14: entered promiscuous mode [ 847.418546][ T2334] sctp: [Deprecated]: syz.5.8164 (pid 2334) Use of int in max_burst socket option deprecated. [ 847.418546][ T2334] Use struct sctp_assoc_value instead [ 847.434778][ T2322] 8021q: adding VLAN 0 to HW filter on device bond14 [ 847.566906][ T2347] netlink: 'syz.5.8169': attribute type 1 has an invalid length. [ 847.630113][ T2347] bond1: entered promiscuous mode [ 847.635731][ T2347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 847.785871][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.896439][ T2371] netlink: 'syz.4.8178': attribute type 3 has an invalid length. [ 847.912000][ T2371] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8178'. [ 847.933896][ T2374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8175'. [ 848.058667][ T2381] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8180'. [ 848.068187][ T2381] openvswitch: netlink: Flow actions attr not present in new flow. [ 848.099827][ T2378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8175'. [ 848.140262][ T2378] nbd: device at index 64 is going down [ 848.182040][ T2388] ipt_ECN: cannot use operation on non-tcp rule [ 848.211876][ T2382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.277159][ T2382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.298226][ T2384] udevd[2384]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 848.323246][ T2384] udevd[2384]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 848.640372][ T2424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8189'. [ 848.670110][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.699018][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.709915][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.809257][ T2435] syzkaller1: entered promiscuous mode [ 848.826223][ T2435] syzkaller1: entered allmulticast mode [ 849.340120][ T2485] Can't find ip_set type bitmap:ip,mac [ 849.352377][ T2486] Can't find ip_set type bitmap:ip,mac [ 849.548499][ T2505] sctp: [Deprecated]: syz.4.8207 (pid 2505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 849.548499][ T2505] Use struct sctp_sack_info instead [ 849.570588][ T2505] xt_limit: Overflow, try lower: 271964/0 [ 849.773247][ T2518] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 849.803020][ T2523] tipc: Failed to remove unknown binding: 66,0,0/2886997057:3834573226/3834573227 [ 849.813561][ T2523] tipc: Failed to remove unknown binding: 66,0,0/2886997057:3834573226/3834573227 [ 849.866530][T19764] net_ratelimit: 4 callbacks suppressed [ 849.866549][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.108902][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.200482][ T2547] netlink: 'syz.5.8217': attribute type 1 has an invalid length. [ 850.201012][ T2550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.208360][ T2547] netlink: 'syz.5.8217': attribute type 1 has an invalid length. [ 850.208379][ T2547] netlink: 'syz.5.8217': attribute type 8 has an invalid length. [ 850.255097][ T2550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.263803][ T2550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.272499][ T2550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.281939][ T2550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.292585][ T2550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.303826][ T2550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.312865][ T2550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.704818][ T2594] ip6gre1: entered allmulticast mode [ 850.869224][ T2603] netlink: 'syz.4.8234': attribute type 2 has an invalid length. [ 851.010622][ T2615] __nla_validate_parse: 16 callbacks suppressed [ 851.011590][ T2615] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8239'. [ 851.187799][ T2628] vlan1: entered promiscuous mode [ 851.192913][ T2628] geneve1: entered promiscuous mode [ 851.199761][ T2628] vlan1: entered allmulticast mode [ 851.204916][ T2628] geneve1: entered allmulticast mode [ 852.745771][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 852.753820][ C0] lec:lec_tx_timeout: lec0 [ 852.758780][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 855.065808][ T7024] net_ratelimit: 62 callbacks suppressed [ 855.065827][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.080231][T21655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.089830][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.098881][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.106130][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.148413][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.626320][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.765684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 857.773810][ C0] lec:lec_tx_timeout: lec0 [ 857.778429][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 858.185930][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.226060][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.708292][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.267440][T19764] net_ratelimit: 3 callbacks suppressed [ 860.267457][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.666063][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.307383][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.347045][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.785708][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 862.793829][ C0] lec:lec_tx_timeout: lec0 [ 862.798422][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 863.387727][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.705940][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.427195][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.466153][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.505952][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.746265][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.546214][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.805447][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 867.813530][ C0] lec:lec_tx_timeout: lec0 [ 867.818608][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 868.585811][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.307624][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.627970][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.787599][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.949447][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.665755][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.173720][ T2656] netlink: 'syz.4.8251': attribute type 1 has an invalid length. [ 871.196285][ T2656] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8251'. [ 871.250868][ T2664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8253'. [ 871.341527][ T2674] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8256'. [ 871.594556][ T2692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8260'. [ 871.611002][ T2692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8260'. [ 871.618891][ T2697] bond16: option arp_all_targets: invalid value (18446744073709551613) [ 871.623360][ T2692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8260'. [ 871.641353][ T2697] bond16 (unregistering): Released all slaves [ 871.716282][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.763940][ T2712] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8265'. [ 871.886897][ T2714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8267'. [ 871.929656][ T2714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8267'. [ 871.945121][ T2722] netlink: 'syz.1.8268': attribute type 8 has an invalid length. [ 871.975222][ T2722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8268'. [ 872.024134][ T2722] bond0: entered promiscuous mode [ 872.036072][ T2722] bond_slave_0: entered promiscuous mode [ 872.042042][ T2722] bond_slave_1: entered promiscuous mode [ 872.087166][ T2722] gretap0: entered promiscuous mode [ 872.127338][ T2722] bond0: left promiscuous mode [ 872.132206][ T2722] bond_slave_0: left promiscuous mode [ 872.148930][ T2722] bond_slave_1: left promiscuous mode [ 872.171070][ T2722] gretap0: left promiscuous mode [ 872.228153][ T2741] sctp: [Deprecated]: syz.4.8273 (pid 2741) Use of int in maxseg socket option. [ 872.228153][ T2741] Use struct sctp_assoc_value instead [ 872.688176][ T5837] block nbd0: Receive control failed (result -32) [ 872.696756][ T2785] lo speed is unknown, defaulting to 1000 [ 872.735914][ T2791] nbd0: detected capacity change from 0 to 127 [ 872.748516][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.761948][ T2794] block nbd0: Dead connection, failed to find a fallback [ 872.776971][ T2794] block nbd0: shutting down sockets [ 872.790910][ T2794] blk_print_req_error: 123 callbacks suppressed [ 872.790927][ T2794] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.811867][ T2794] buffer_io_error: 122 callbacks suppressed [ 872.811883][ T2794] Buffer I/O error on dev nbd0, logical block 0, async page read [ 872.826521][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 872.826549][ C0] lec:lec_tx_timeout: lec0 [ 872.839281][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 872.867095][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.884926][ T2794] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.894759][ T2794] Buffer I/O error on dev nbd0, logical block 1, async page read [ 872.904359][ T2794] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.914514][ T2794] Buffer I/O error on dev nbd0, logical block 2, async page read [ 872.953561][ T2794] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.985140][ T2794] Buffer I/O error on dev nbd0, logical block 3, async page read [ 873.039754][ T2794] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 873.055669][ T2794] Buffer I/O error on dev nbd0, logical block 0, async page read [ 873.075409][ T2794] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 873.103924][ T2794] Buffer I/O error on dev nbd0, logical block 1, async page read [ 873.122555][ T2794] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 873.132290][ T2794] Buffer I/O error on dev nbd0, logical block 2, async page read [ 873.140505][ T2794] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 873.151749][ T2794] Buffer I/O error on dev nbd0, logical block 3, async page read [ 873.159674][ T2794] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 873.169523][ T2794] Buffer I/O error on dev nbd0, logical block 0, async page read [ 873.178578][ T2794] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 873.188540][ T2794] Buffer I/O error on dev nbd0, logical block 1, async page read [ 873.194998][ T2807] netlink: 'syz.2.8285': attribute type 12 has an invalid length. [ 873.197584][ T2794] ldm_validate_partition_table(): Disk read failed. [ 873.212075][ T2794] Dev nbd0: unable to read RDB block 0 [ 873.218517][ T2794] nbd0: unable to read partition table [ 873.239132][ T2794] ldm_validate_partition_table(): Disk read failed. [ 873.255888][ T2794] Dev nbd0: unable to read RDB block 0 [ 873.262279][ T2794] nbd0: unable to read partition table [ 873.280282][ T2809] netlink: 'syz.0.8287': attribute type 5 has an invalid length. [ 873.318785][ T2809] netlink: 'syz.0.8287': attribute type 6 has an invalid length. [ 873.531606][ T2844] vlan3: entered allmulticast mode [ 873.558112][ T2844] bridge2: entered allmulticast mode [ 873.574315][ T2844] erspan0: left allmulticast mode [ 873.579601][ T2844] erspan0: left promiscuous mode [ 873.597077][ T2844] bridge1: port 1(erspan0) entered disabled state [ 873.623362][ T2858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.632483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.656414][ T2844] bridge2: port 1(erspan0) entered blocking state [ 873.663004][ T2844] bridge2: port 1(erspan0) entered disabled state [ 873.709209][ T2844] erspan0: entered allmulticast mode [ 873.716711][ T2844] erspan0: entered promiscuous mode [ 873.758090][ T2844] bridge2: port 1(erspan0) entered blocking state [ 873.764665][ T2844] bridge2: port 1(erspan0) entered forwarding state [ 873.790498][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.801287][ T2869] netlink: 'syz.5.8296': attribute type 83 has an invalid length. [ 873.834962][ T2864] IPv6: sit1: Disabled Multicast RS [ 873.864078][ T2864] sit1: entered allmulticast mode [ 873.976588][ T2880] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 874.025770][ T2890] netlink: 'syz.0.8300': attribute type 1 has an invalid length. [ 874.112445][ T2890] bond17: entered promiscuous mode [ 874.118216][ T2890] 8021q: adding VLAN 0 to HW filter on device bond17 [ 874.198284][ T2895] ipvlan2: entered allmulticast mode [ 874.212131][ T2895] bond17: entered allmulticast mode [ 874.236718][ T2890] bond17: (slave bridge2): making interface the new active one [ 874.244443][ T2890] bridge2: entered promiscuous mode [ 874.250186][ T2890] bridge2: entered allmulticast mode [ 874.259424][ T2890] bond17: (slave bridge2): Enslaving as an active interface with an up link [ 874.460043][ T2911] lo: Caught tx_queue_len zero misconfig [ 874.825530][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.939408][ T2940] xt_cluster: node mask cannot exceed total number of nodes [ 874.973217][ T2940] xt_cluster: node mask cannot exceed total number of nodes [ 875.054314][ T2947] netlink: 'syz.2.8318': attribute type 9 has an invalid length. [ 875.065551][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 875.093595][T19785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.846601][ T2992] netlink: 'syz.5.8330': attribute type 1 has an invalid length. [ 875.875494][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.038694][ T3006] netlink: 'syz.4.8335': attribute type 1 has an invalid length. [ 876.222873][ T3026] bond31: entered allmulticast mode [ 876.296542][ T3019] __nla_validate_parse: 16 callbacks suppressed [ 876.296561][ T3019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8340'. [ 876.348455][ T3015] bond31: left allmulticast mode [ 876.464303][ T3038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8344'. [ 876.503651][ T3038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8344'. [ 876.785675][ T3050] tunl0: entered promiscuous mode [ 876.792744][ T3050] netlink: 'syz.5.8347': attribute type 3 has an invalid length. [ 876.800749][ T3050] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8347'. [ 876.863134][ T3053] netlink: 'syz.4.8349': attribute type 1 has an invalid length. [ 876.905852][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.930998][ T3053] bond22: entered promiscuous mode [ 876.936870][ T3053] 8021q: adding VLAN 0 to HW filter on device bond22 [ 877.062186][ T3060] 8021q: adding VLAN 0 to HW filter on device bond22 [ 877.119336][ T3060] bond22: (slave vcan1): The slave device specified does not support setting the MAC address [ 877.158063][ T3060] bond22: (slave vcan1): Error -95 calling set_mac_address [ 877.171183][ T3072] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 877.245714][ T3072] smc: net device team0 applied user defined pnetid SYZ2 [ 877.278291][ T3079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8354'. [ 877.510054][ T3094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8359'. [ 877.820795][ T3120] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8362'. [ 877.845403][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 877.853458][ C0] lec:lec_tx_timeout: lec0 [ 877.859425][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 877.866757][ T3120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8362'. [ 877.945856][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.014954][ T3115] lo speed is unknown, defaulting to 1000 [ 878.106263][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.170974][ T3125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 878.209601][ T3127] netlink: 13 bytes leftover after parsing attributes in process `syz.0.8364'. [ 878.303082][ T3129] netlink: 'syz.0.8366': attribute type 1 has an invalid length. [ 878.350112][ T3129] bond19: entered promiscuous mode [ 878.356293][ T3129] 8021q: adding VLAN 0 to HW filter on device bond19 [ 878.413241][ T3133] 8021q: adding VLAN 0 to HW filter on device bond19 [ 878.421660][ T3133] bond19: (slave vcan0): The slave device specified does not support setting the MAC address [ 878.433506][ T3133] bond19: (slave vcan0): Error -95 calling set_mac_address [ 878.561107][ T3142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8369'. [ 878.618881][ T3145] netlink: 'syz.0.8371': attribute type 1 has an invalid length. [ 878.690934][ T3152] xt_cgroup: invalid path, errno=-2 [ 878.733643][ T3145] bond20: entered promiscuous mode [ 878.767100][ T3145] 8021q: adding VLAN 0 to HW filter on device bond20 [ 878.879608][ T3150] geneve2: entered promiscuous mode [ 878.906287][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.949067][T21648] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 34012 - 0 [ 878.965497][T21648] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 34012 - 0 [ 878.974381][T21648] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 34012 - 0 [ 878.986085][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.015234][T21648] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 34012 - 0 [ 879.184148][ T3150] ipvlan2: entered allmulticast mode [ 879.191704][ T3150] batadv_slave_1: entered allmulticast mode [ 879.201181][ T3150] batman_adv: batadv0: Adding interface: ipvlan2 [ 879.208228][ T3150] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.237236][ T3150] batman_adv: batadv0: Interface activated: ipvlan2 [ 879.559051][ T3196] netlink: 'syz.0.8381': attribute type 21 has an invalid length. [ 879.742592][ T3200] lo speed is unknown, defaulting to 1000 [ 880.036253][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.142212][ T3210] veth0_to_bridge: left allmulticast mode [ 880.148168][ T3210] veth0_to_bridge: left promiscuous mode [ 880.154229][ T3210] bridge0: port 1(veth0_to_bridge) entered disabled state [ 880.204580][ T3210] bond0: (slave bridge_slave_1): Releasing backup interface [ 880.254704][ T3210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 880.393956][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.601949][ T3237] netlink: 'syz.0.8393': attribute type 10 has an invalid length. [ 880.653572][ T3237] team0: Device vxcan0 is of different type [ 880.987021][ T3262] net_ratelimit: 1 callbacks suppressed [ 880.987040][ T3262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.016578][ T3262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.036012][ T3262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.052957][ T3262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.061849][ T3262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.075943][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.098669][ T3264] syzkaller0: entered promiscuous mode [ 881.104282][ T3264] syzkaller0: entered allmulticast mode [ 881.139652][ T3263] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 881.156807][T21497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.106434][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.137908][ T3298] __nla_validate_parse: 6 callbacks suppressed [ 882.137928][ T3298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8409'. [ 882.219424][ T3299] netlink: 'syz.5.8409': attribute type 10 has an invalid length. [ 882.298892][T28106] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 882.311275][T28106] CPU: 0 UID: 0 PID: 28106 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 882.311300][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 882.311311][T28106] Call Trace: [ 882.311319][T28106] [ 882.311327][T28106] dump_stack_lvl+0xe8/0x150 [ 882.311362][T28106] dump_header+0xd3/0x4c0 [ 882.311385][T28106] oom_kill_process+0x3ab/0x970 [ 882.311410][T28106] out_of_memory+0x106c/0x1410 [ 882.311429][T28106] ? percpu_ref_put+0x19/0x180 [ 882.311454][T28106] ? __pfx___mutex_lock+0x10/0x10 [ 882.311485][T28106] ? __pfx_out_of_memory+0x10/0x10 [ 882.311502][T28106] ? do_raw_spin_unlock+0xf5/0x210 [ 882.311531][T28106] try_charge_memcg+0xc53/0x1560 [ 882.311570][T28106] ? __pfx_try_charge_memcg+0x10/0x10 [ 882.311603][T28106] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 882.311630][T28106] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 882.311655][T28106] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 882.311681][T28106] __swap_cache_prepare_and_add+0xe8/0x760 [ 882.311715][T28106] ? page_rmappable_folio+0x9a/0x170 [ 882.311747][T28106] swap_cache_alloc_folio+0xf1/0x240 [ 882.311778][T28106] swap_cluster_readahead+0x369/0x690 [ 882.311802][T28106] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 882.311833][T28106] ? get_vma_policy+0x27b/0x3c0 [ 882.311859][T28106] swapin_readahead+0x196/0xc50 [ 882.311889][T28106] ? __pfx_swapin_readahead+0x10/0x10 [ 882.311908][T28106] ? swap_table_get+0x1e/0x260 [ 882.311936][T28106] ? swap_table_get+0x1e/0x260 [ 882.311958][T28106] ? swap_table_get+0x1e/0x260 [ 882.311980][T28106] ? swap_table_get+0x216/0x260 [ 882.312004][T28106] ? swap_cache_get_folio+0x513/0x520 [ 882.312032][T28106] do_swap_page+0x56f/0x5a20 [ 882.312074][T28106] ? do_swap_page+0x127/0x5a20 [ 882.312101][T28106] ? __pfx_do_swap_page+0x10/0x10 [ 882.312121][T28106] ? __pte_offset_map+0x1ae/0x240 [ 882.312140][T28106] ? pte_offset_map_rw_nolock+0xea/0x160 [ 882.312158][T28106] handle_mm_fault+0x12d2/0x3310 [ 882.312194][T28106] ? handle_mm_fault+0xee/0x3310 [ 882.312224][T28106] ? __pfx_handle_mm_fault+0x10/0x10 [ 882.312246][T28106] ? lock_vma_under_rcu+0x45a/0x500 [ 882.312285][T28106] do_user_addr_fault+0xa73/0x1340 [ 882.312313][T28106] ? rcu_is_watching+0x15/0xb0 [ 882.312336][T28106] ? trace_page_fault_user+0x84/0x210 [ 882.312366][T28106] exc_page_fault+0x6a/0xc0 [ 882.312388][T28106] asm_exc_page_fault+0x26/0x30 [ 882.312403][T28106] RIP: 0033:0x7f12b655d04e [ 882.312420][T28106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 882.312434][T28106] RSP: 002b:00007ffca54525d8 EFLAGS: 00010246 [ 882.312449][T28106] RAX: 0000000000000000 RBX: 0000555557329500 RCX: 00007f12b655d04e [ 882.312460][T28106] RDX: 00007ffca5452630 RSI: 0000000000000000 RDI: 0000000000000000 [ 882.312469][T28106] RBP: 00007ffca545269c R08: 0000000000000000 R09: 0000000000000000 [ 882.312478][T28106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 882.312488][T28106] R13: 00000000000927c0 R14: 00000000000d7434 R15: 00007ffca54526f0 [ 882.312514][T28106] [ 882.312580][T28106] memory: usage 307200kB, limit 307200kB, failcnt 495 [ 882.632448][T28106] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 882.641621][T28106] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 882.672476][T28106] Memory cgroup stats for /syz1: [ 882.672665][T28106] cache 0 [ 882.680853][T28106] rss 0 [ 882.692667][T28106] rss_huge 0 [ 882.696767][T28106] shmem 0 [ 882.707396][T28106] mapped_file 0 [ 882.712250][T28106] dirty 0 [ 882.722135][T28106] writeback 0 [ 882.725669][T28106] workingset_refault_anon 0 [ 882.737633][T28106] workingset_refault_file 0 [ 882.742172][T28106] swap 241664 [ 882.746262][T28106] swapcached 241664 [ 882.750258][T28106] pgpgin 132547 [ 882.753747][T28106] pgpgout 132547 [ 882.773063][T28106] pgfault 268331 [ 882.784498][T28106] pgmajfault 4 [ 882.788303][T28106] inactive_anon 0 [ 882.791959][T28106] active_anon 0 [ 882.802832][T28106] inactive_file 0 [ 882.813916][T28106] active_file 0 [ 882.818439][T28106] unevictable 0 [ 882.821921][T28106] hierarchical_memory_limit 314572800 [ 882.846365][T28106] hierarchical_memsw_limit 9223372036854771712 [ 882.852681][T28106] total_cache 0 [ 882.863398][T28106] total_rss 0 [ 882.868243][T28106] total_rss_huge 0 [ 882.871993][T28106] total_shmem 0 [ 882.875576][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 882.875600][ C0] lec:lec_tx_timeout: lec0 [ 882.883701][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 882.903149][T28106] total_mapped_file 0 [ 882.916960][T28106] total_dirty 0 [ 882.920589][T28106] total_writeback 0 [ 882.932738][T28106] total_workingset_refault_anon 0 [ 882.939201][T28106] total_workingset_refault_file 0 [ 882.944385][T28106] total_swap 241664 [ 882.958001][T28106] total_swapcached 241664 [ 882.962452][T28106] total_pgpgin 132547 [ 882.973839][T28106] total_pgpgout 132547 [ 882.985061][T28106] total_pgfault 268331 [ 882.995166][T28106] total_pgmajfault 4 [ 883.001024][T28106] total_inactive_anon 0 [ 883.012749][T28106] total_active_anon 0 [ 883.017445][T28106] total_inactive_file 0 [ 883.029487][T28106] total_active_file 0 [ 883.033584][T28106] total_unevictable 0 [ 883.044954][T28106] anon_cost 0 [ 883.049399][T28106] file_cost 0 [ 883.052708][T28106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8399,pid=3255,uid=0 [ 883.080470][T28106] Memory cgroup out of memory: Killed process 3255 (syz.1.8399) total-vm:106728kB, anon-rss:1236kB, file-rss:27544kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 883.159575][ T7024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.599399][ T3306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8411'. [ 884.859537][ T3325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8416'. [ 884.915738][ T3337] netlink: 'syz.2.8420': attribute type 1 has an invalid length. [ 885.009084][ T3337] bond32: entered promiscuous mode [ 885.020175][ T3337] 8021q: adding VLAN 0 to HW filter on device bond32 [ 885.046774][ T3345] 8021q: adding VLAN 0 to HW filter on device bond32 [ 885.083573][ T3345] bond32: (slave vcan1): The slave device specified does not support setting the MAC address [ 885.117649][ T3345] bond32: (slave vcan1): Error -95 calling set_mac_address [ 885.259420][ T3356] netlink: 'syz.4.8422': attribute type 9 has an invalid length. [ 885.267845][ T3356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8422'. [ 885.570363][ T3373] netlink: 'syz.1.8429': attribute type 4 has an invalid length. [ 885.614592][ T3381] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 885.628959][ T3380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8432'. [ 885.638429][ T3379] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 885.646462][ T3380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8432'. [ 885.659532][ T3375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8430'. [ 885.715239][ T3378] 8021q: adding VLAN 0 to HW filter on device bond23 [ 885.886379][ T3404] netlink: 'syz.5.8433': attribute type 1 has an invalid length. [ 885.971431][ T3404] bond2: entered promiscuous mode [ 885.977004][ T3404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 886.021810][ T3412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 886.049023][ T3412] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 886.066659][ T3412] bond2: (slave vcan1): Error -95 calling set_mac_address [ 886.145569][ T3427] netlink: 'syz.2.8441': attribute type 4 has an invalid length. [ 886.192685][ T3421] netlink: 'syz.2.8441': attribute type 4 has an invalid length. [ 886.237472][ T3432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8444'. [ 886.275758][ T5831] net_ratelimit: 11 callbacks suppressed [ 886.275777][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.351495][ T3435] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8443'. [ 886.365050][ T3438] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8445'. [ 886.546436][ T3450] syzkaller0: entered promiscuous mode [ 886.551984][ T3450] syzkaller0: entered allmulticast mode [ 886.765416][ T3460] can: request_module (can-proto-0) failed. [ 886.780606][ T3464] syzkaller1: left promiscuous mode [ 886.786155][ T3464] syzkaller1: left allmulticast mode [ 886.831284][ T3468] netlink: 'syz.0.8456': attribute type 1 has an invalid length. [ 886.932332][ T3468] bond21: entered promiscuous mode [ 886.938295][ T3468] 8021q: adding VLAN 0 to HW filter on device bond21 [ 886.984666][ T3482] netlink: 'syz.5.8462': attribute type 9 has an invalid length. [ 886.997071][ T3482] netlink: 'syz.5.8462': attribute type 11 has an invalid length. [ 887.018205][ T3476] 8021q: adding VLAN 0 to HW filter on device bond21 [ 887.035971][ T3476] bond21: (slave vcan0): The slave device specified does not support setting the MAC address [ 887.067720][ T3476] bond21: (slave vcan0): Error -95 calling set_mac_address [ 887.296284][ T3500] __nla_validate_parse: 6 callbacks suppressed [ 887.296303][ T3500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8468'. [ 887.316778][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.375083][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8467'. [ 887.392312][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8470'. [ 887.404866][ T3507] validate_nla: 1 callbacks suppressed [ 887.404882][ T3507] netlink: 'syz.1.8470': attribute type 5 has an invalid length. [ 887.425434][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8470'. [ 887.443559][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8470'. [ 887.451697][ T7287] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.454277][ T3507] netlink: 'syz.1.8470': attribute type 5 has an invalid length. [ 887.474000][ T7287] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.493304][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8470'. [ 887.522770][ T7287] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.541790][ T7287] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.560804][ T3517] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 887.736431][ T3518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 887.799017][ T3520] ip6t_rpfilter: unknown options [ 887.885333][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 887.893532][ C0] lec:lec_tx_timeout: lec0 [ 887.898159][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 887.932785][ T3547] netlink: 'syz.0.8477': attribute type 1 has an invalid length. [ 888.062803][ T3547] bond22: entered promiscuous mode [ 888.077954][ T3547] 8021q: adding VLAN 0 to HW filter on device bond22 [ 888.133955][ T3555] 8021q: adding VLAN 0 to HW filter on device bond22 [ 888.141960][ T3555] bond22: (slave vcan0): The slave device specified does not support setting the MAC address [ 888.154080][ T3555] bond22: (slave vcan0): Error -95 calling set_mac_address [ 888.345982][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.354140][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.381831][ T3571] erspan0: left allmulticast mode [ 888.401250][ T3571] erspan0: left promiscuous mode [ 888.410022][ T3571] bridge2: port 1(erspan0) entered disabled state [ 888.433607][ T3571] bond0: (slave bridge_slave_1): Releasing backup interface [ 888.455653][ T3571] bond0: (slave bond_slave_0): Releasing backup interface [ 888.494113][ T3571] bond0: (slave bond_slave_1): Releasing backup interface [ 888.508606][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.517878][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.555415][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.576821][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.594613][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.617786][ T3571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 888.961412][ T3609] syzkaller0: entered promiscuous mode [ 888.988451][ T3609] syzkaller0: entered allmulticast mode [ 889.051780][ T3618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.139803][T19764] lo speed is unknown, defaulting to 1000 [ 889.155371][T19764] syz2: Port: 1 Link DOWN [ 889.160725][T19764] lo speed is unknown, defaulting to 1000 [ 889.185597][ T3632] netlink: 'syz.0.8495': attribute type 1 has an invalid length. [ 889.284490][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8496'. [ 889.364960][ T3632] bond23: entered promiscuous mode [ 889.385987][ T3632] 8021q: adding VLAN 0 to HW filter on device bond23 [ 889.393243][T19764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.467723][ T3633] 8021q: adding VLAN 0 to HW filter on device bond23 [ 889.474937][ T3633] bond23: (slave vcan0): The slave device specified does not support setting the MAC address [ 889.524339][ T3633] bond23: (slave vcan0): Error -95 calling set_mac_address [ 889.628627][T32424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 889.638840][T32424] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 889.649547][T32424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 889.663434][T32424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 889.672715][T32424] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 889.708756][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 889.718689][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 889.727248][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 889.740901][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 889.756766][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 889.893924][ T3653] lo speed is unknown, defaulting to 1000 [ 890.044242][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8501'. [ 890.362364][ T3696] openvswitch: netlink: IP tunnel dst address not specified [ 890.654162][ T3712] netlink: 'syz.5.8509': attribute type 1 has an invalid length. [ 890.834557][ T3712] bond3: entered promiscuous mode [ 890.866910][ T3712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 890.968070][ T3719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 890.976670][ T3719] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 891.018267][ T3719] bond3: (slave vcan1): Error -95 calling set_mac_address [ 891.088254][ T3730] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8512'. [ 891.288338][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8514'. [ 891.387265][ T5902] net_ratelimit: 1 callbacks suppressed [ 891.387283][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.465686][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.484355][ T3747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 891.785402][T32424] Bluetooth: hci4: command tx timeout [ 891.858895][ T3775] nbd: must specify a size in bytes for the device [ 891.909161][ T3778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.115132][ T3785] openvswitch: netlink: IPv6 tunnel dst address is zero [ 892.123765][ T3751] bridge_slave_0: left promiscuous mode [ 892.263793][ T3751] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 892.337290][ T3751] veth0_macvtap: left allmulticast mode [ 892.343084][ T3751] macvtap1: left allmulticast mode [ 892.350474][ T3751] veth3: left allmulticast mode [ 892.395506][ T3751] bond6: left promiscuous mode [ 892.402653][ T3751] veth1_vlan: left allmulticast mode [ 892.408922][ T3751] macvtap2: left promiscuous mode [ 892.413994][ T3751] macvtap2: left allmulticast mode [ 892.441187][ T3751] geneve3: left promiscuous mode [ 892.446549][ T3751] geneve3: left allmulticast mode [ 892.472987][ T3751] vlan3: left promiscuous mode [ 892.479019][ T3751] geneve1: left promiscuous mode [ 892.484302][ T3751] vlan3: left allmulticast mode [ 892.489816][ T3751] geneve1: left allmulticast mode [ 892.571105][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.659267][T21651] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.673631][T21651] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.697728][T21651] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 892.770515][T21651] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.785728][T21651] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.804004][T21651] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 892.824431][T21651] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.838026][T21651] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.847671][T21651] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 892.879861][T21651] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.890568][T21651] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.900049][T21651] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 892.909509][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 892.909537][ C0] lec:lec_tx_timeout: lec0 [ 892.918047][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 892.932071][ T3802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 892.948917][ T3795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 893.099399][ T3814] 8021q: VLANs not supported on lo [ 893.118135][ T3653] chnl_net:caif_netlink_parms(): no params data found [ 893.323204][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.331333][ T3653] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.338960][ T3653] bridge_slave_0: entered allmulticast mode [ 893.346746][ T3653] bridge_slave_0: entered promiscuous mode [ 893.357495][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.364730][ T3653] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.373053][ T3653] bridge_slave_1: entered allmulticast mode [ 893.381463][ T3653] bridge_slave_1: entered promiscuous mode [ 893.419912][ T3653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.450510][ T3653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.552524][ T3653] team0: Port device team_slave_0 added [ 893.564671][ T3653] team0: Port device team_slave_1 added [ 893.581670][ T3833] netlink: 'syz.4.8542': attribute type 1 has an invalid length. [ 893.625826][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.649147][ T3835] __nla_validate_parse: 4 callbacks suppressed [ 893.649163][ T3835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8542'. [ 893.691463][ T3653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.713392][ T3653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.779586][ T3653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.813898][ T3653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.826249][ T3653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.854538][ T3653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.867664][T32424] Bluetooth: hci4: command tx timeout [ 893.877977][ T3844] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 893.944924][ T3653] hsr_slave_0: entered promiscuous mode [ 893.951907][ T3653] hsr_slave_1: entered promiscuous mode [ 893.966440][ T3653] debugfs: 'hsr0' already exists in 'hsr' [ 893.976809][ T3653] Cannot create hsr debugfs directory [ 894.183364][ T3856] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8547'. [ 894.201489][ T3854] netlink: 'syz.5.8546': attribute type 7 has an invalid length. [ 894.217327][ T3854] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8546'. [ 894.279299][ T3854] Unsupported ieee802154 address type: 0 [ 894.289748][ T3860] netlink: 'syz.0.8549': attribute type 1 has an invalid length. [ 894.298518][ T3860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8549'. [ 894.357905][ T3653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.385136][ T3653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 894.487079][ T3653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.499203][ T3653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 894.558482][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8551'. [ 894.599972][ T3653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.611201][ T3653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 894.626000][ T3872] netlink: 'syz.5.8551': attribute type 10 has an invalid length. [ 894.706058][ T3653] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.726315][ T3653] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 895.021475][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8556'. [ 895.031343][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8556'. [ 895.042480][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8556'. [ 895.059964][ T3896] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 895.075458][ T3896] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 895.093182][ T3896] gretap4: entered promiscuous mode [ 895.108844][ T3896] gretap4: entered allmulticast mode [ 895.210379][ T3653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.232835][ T3653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.293525][ T3909] syzkaller0: entered promiscuous mode [ 895.301997][ T3909] syzkaller0: entered allmulticast mode [ 895.311311][ T3653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.340963][ T3903] lo speed is unknown, defaulting to 1000 [ 895.353284][ T3653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 895.374743][ T3914] SET target dimension over the limit! [ 895.499534][ T3653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.530515][ T3653] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.549703][T21661] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.556998][T21661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.589260][T21655] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.596573][T21655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.609742][ T3929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8562'. [ 895.624465][ T3931] netlink: 'syz.4.8564': attribute type 1 has an invalid length. [ 895.945428][T32424] Bluetooth: hci4: command tx timeout [ 896.045244][ T3653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.208106][ T3909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 896.217630][ T3909] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 896.288333][ T3653] veth0_vlan: entered promiscuous mode [ 896.321265][ T3653] veth1_vlan: entered promiscuous mode [ 896.438967][ T3653] veth0_macvtap: entered promiscuous mode [ 896.485611][ T3653] veth1_macvtap: entered promiscuous mode [ 896.542210][ T3966] netlink: 'syz.4.8571': attribute type 4 has an invalid length. [ 896.573471][ T3653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.610883][ T3653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.643279][T21661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.664069][T21661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.721682][T21661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.743566][T21661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.755294][T19766] net_ratelimit: 4 callbacks suppressed [ 896.755310][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.014743][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.045384][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.148022][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.175596][ T3998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8582'. [ 897.185635][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.382348][ T4020] x_tables: duplicate underflow at hook 1 [ 897.473054][ T7003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.596032][ T4029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 897.786037][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.994335][ T4060] bond24: Unable to set down delay as MII monitoring is disabled [ 898.003880][ T4060] bond24 (unregistering): Released all slaves [ 898.024749][ T4062] pimreg: left allmulticast mode [ 898.106031][T19787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.745396][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 898.753535][ C0] lec:lec_tx_timeout: lec0 [ 898.759461][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 898.826100][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.866725][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.507320][T19787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.670616][T19787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.722495][T21648] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 900.741736][T21648] bond13 (unregistering): (slave ip6gretap2): Releasing active interface [ 900.848722][T21648] bond2 (unregistering): (slave geneve2): Releasing active interface [ 900.889401][ T4051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 900.900512][ T4060] netlink: 'syz.0.8595': attribute type 10 has an invalid length. [ 900.910424][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.919735][ T4060] __nla_validate_parse: 5 callbacks suppressed [ 900.919752][ T4060] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8595'. [ 901.198910][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8603'. [ 901.227459][T21648] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 901.251120][T21648] bond0 (unregistering): Released all slaves [ 901.264879][T21648] bond1 (unregistering): Released all slaves [ 901.278864][ T4083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8604'. [ 901.293621][T21648] bond2 (unregistering): Released all slaves [ 901.328256][T21648] bond3 (unregistering): Released all slaves [ 901.350144][T21648] bond4 (unregistering): Released all slaves [ 901.370013][T21648] bond5 (unregistering): Released all slaves [ 901.385034][T21648] bond6 (unregistering): Released all slaves [ 901.402575][T21648] bond7 (unregistering): Released all slaves [ 901.423192][T21648] bond8 (unregistering): Released all slaves [ 901.438572][T21648] bond9 (unregistering): Released all slaves [ 901.454551][T21648] bond10 (unregistering): Released all slaves [ 901.477522][T21648] bond11 (unregistering): Released all slaves [ 901.491896][T21648] bond12 (unregistering): Released all slaves [ 901.506850][T21648] bond13 (unregistering): Released all slaves [ 901.529725][T21648] bond14 (unregistering): Released all slaves [ 901.547904][T21648] bond15 (unregistering): (slave veth3): Releasing active interface [ 901.557860][T21648] bond15 (unregistering): (slave veth5): Releasing active interface [ 901.567096][T21648] bond15 (unregistering): Released all slaves [ 901.586887][T21648] bond16 (unregistering): Released all slaves [ 901.602617][T21648] bond17 (unregistering): (slave vcan1): Releasing backup interface [ 901.612175][T21648] bond17 (unregistering): Released all slaves [ 901.637369][T21648] bond18 (unregistering): (slave vcan2): Releasing backup interface [ 901.646886][T21648] bond18 (unregistering): Released all slaves [ 901.662243][T21648] bond19 (unregistering): Released all slaves [ 901.677120][T21648] bond20 (unregistering): Released all slaves [ 901.692488][T21648] bond21 (unregistering): Released all slaves [ 901.716877][T21648] bond22 (unregistering): (slave vcan3): Releasing backup interface [ 901.725766][T21648] bond22 (unregistering): Released all slaves [ 901.742338][T21648] bond23 (unregistering): (slave vcan4): Releasing backup interface [ 901.753186][T21648] bond23 (unregistering): Released all slaves [ 901.776814][ T4084] net_ratelimit: 5 callbacks suppressed [ 901.776827][ T4084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 901.810466][ T4093] bridge0: Caught tx_queue_len zero misconfig [ 901.830236][ T4082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.956005][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.978700][T21648] : left promiscuous mode [ 902.123697][T21648] tipc: Disabling bearer [ 902.144224][T21648] tipc: Left network mode [ 902.148607][ T4111] ip6tnl0: Caught tx_queue_len zero misconfig [ 902.234952][ T4111] syzkaller0: entered promiscuous mode [ 902.248235][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8610'. [ 902.266430][ T4111] syzkaller0: entered allmulticast mode [ 902.296370][ T4119] 0: reclassify loop, rule prio 0, protocol 800 [ 902.453799][ T4122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8613'. [ 902.509971][ T4130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8612'. [ 902.562824][ T4124] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 902.720431][ T4140] netlink: 'syz.4.8616': attribute type 1 has an invalid length. [ 902.765521][ T4131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8615'. [ 902.799481][ T4140] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 902.890453][ T4131] veth0_to_team: entered promiscuous mode [ 902.935688][ T4148] netlink: 'syz.5.8617': attribute type 1 has an invalid length. [ 902.986009][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.012498][ T4131] veth0_to_team: left promiscuous mode [ 903.191360][ T4148] bond4: entered promiscuous mode [ 903.205132][ T4148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 903.276338][ T4156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 903.299797][ T4156] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 903.311144][ T4156] bond4: (slave vcan1): Error -95 calling set_mac_address [ 903.476620][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8620'. [ 903.544703][ T4168] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 903.553189][ T7003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.691019][ T4176] netlink: 'syz.0.8624': attribute type 1 has an invalid length. [ 903.775353][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 903.783471][ C0] lec:lec_tx_timeout: lec0 [ 903.827891][ T4187] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.8624'. [ 904.009495][ T4176] bond24: entered promiscuous mode [ 904.030980][ T4176] 8021q: adding VLAN 0 to HW filter on device bond24 [ 904.037627][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.160307][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8626'. [ 904.170061][ T4168] syzkaller0: entered promiscuous mode [ 904.177236][ T4168] syzkaller0: entered allmulticast mode [ 904.230136][T21648] hsr_slave_0: left promiscuous mode [ 904.314330][T21648] pim6reg (unregistering): left allmulticast mode [ 904.699804][ T4222] netlink: 'syz.1.8632': attribute type 1 has an invalid length. [ 905.075736][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.787224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.105784][ T4213] netlink: 'syz.2.8631': attribute type 13 has an invalid length. [ 906.175130][ T4220] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 906.186220][ T4222] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 906.347229][ T4231] siw: device registration error -23 [ 906.464659][ T4243] netlink: 'syz.5.8638': attribute type 1 has an invalid length. [ 906.538670][ T4248] __nla_validate_parse: 2 callbacks suppressed [ 906.538696][ T4248] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8641'. [ 906.587643][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8642'. [ 906.605177][ T4243] bond5: entered promiscuous mode [ 906.611133][ T4243] 8021q: adding VLAN 0 to HW filter on device bond5 [ 906.653998][ T4248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8641'. [ 906.671866][ T4253] netlink: 'syz.2.8642': attribute type 10 has an invalid length. [ 906.681865][ T4249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8641'. [ 906.809442][ T4263] netlink: 'syz.2.8645': attribute type 1 has an invalid length. [ 906.834842][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8645'. [ 906.886281][ T4268] net_ratelimit: 2 callbacks suppressed [ 906.886297][ T4268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.979093][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8649'. [ 907.026743][ T4275] xt_NFQUEUE: number of total queues is 0 [ 907.118353][ T4281] netlink: 'syz.4.8653': attribute type 39 has an invalid length. [ 907.128112][ T4281] hsr_slave_1 (unregistering): left promiscuous mode [ 907.155722][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.167968][ T4283] bond1: Unable to set up delay as MII monitoring is disabled [ 907.178229][ T4283] bond1 (unregistering): Released all slaves [ 907.274680][ T4289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8655'. [ 907.285093][ T4289] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8655'. [ 907.332546][ T4291] netlink: 'syz.2.8656': attribute type 1 has an invalid length. [ 907.404902][ T4295] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 907.418999][ T4297] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 907.533464][ T4305] netlink: 'syz.0.8662': attribute type 3 has an invalid length. [ 907.597405][ T4306] netlink: 'syz.4.8661': attribute type 23 has an invalid length. [ 907.662789][ T4313] netlink: 'syz.2.8665': attribute type 1 has an invalid length. [ 907.700916][ T4314] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8661'. [ 907.758620][ T4316] netlink: 'syz.1.8666': attribute type 5 has an invalid length. [ 907.963321][ T4334] FAULT_INJECTION: forcing a failure. [ 907.963321][ T4334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.977107][ T4334] CPU: 0 UID: 0 PID: 4334 Comm: syz.1.8672 Not tainted syzkaller #0 PREEMPT(full) [ 907.977136][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 907.977148][ T4334] Call Trace: [ 907.977156][ T4334] [ 907.977164][ T4334] dump_stack_lvl+0xe8/0x150 [ 907.977195][ T4334] should_fail_ex+0x412/0x560 [ 907.977228][ T4334] _copy_from_user+0x2d/0xb0 [ 907.977250][ T4334] ___sys_sendmsg+0x1c6/0x360 [ 907.977279][ T4334] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.977334][ T4334] ? __fget_files+0x2a/0x420 [ 907.977349][ T4334] ? __fget_files+0x3a0/0x420 [ 907.977375][ T4334] __x64_sys_sendmsg+0x1bd/0x2a0 [ 907.977401][ T4334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.977432][ T4334] ? __pfx_ksys_write+0x10/0x10 [ 907.977462][ T4334] do_syscall_64+0x14d/0xf80 [ 907.977481][ T4334] ? trace_irq_disable+0x3b/0x150 [ 907.977494][ T4334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.977509][ T4334] ? clear_bhb_loop+0x40/0x90 [ 907.977527][ T4334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.977541][ T4334] RIP: 0033:0x7f12b659c819 [ 907.977556][ T4334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.977569][ T4334] RSP: 002b:00007f12b47f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.977584][ T4334] RAX: ffffffffffffffda RBX: 00007f12b6815fa0 RCX: 00007f12b659c819 [ 907.977603][ T4334] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 907.977613][ T4334] RBP: 00007f12b47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 907.977622][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.977630][ T4334] R13: 00007f12b6816038 R14: 00007f12b6815fa0 R15: 00007ffca54522f8 [ 907.977653][ T4334] [ 907.988943][ T4335] IPv6: NLM_F_CREATE should be specified when creating new route [ 908.186867][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.269839][ T4342] FAULT_INJECTION: forcing a failure. [ 908.269839][ T4342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.294257][ T4342] CPU: 0 UID: 0 PID: 4342 Comm: syz.0.8676 Not tainted syzkaller #0 PREEMPT(full) [ 908.294280][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 908.294291][ T4342] Call Trace: [ 908.294298][ T4342] [ 908.294307][ T4342] dump_stack_lvl+0xe8/0x150 [ 908.294336][ T4342] should_fail_ex+0x412/0x560 [ 908.294370][ T4342] _copy_from_iter+0x1d3/0x1670 [ 908.294392][ T4342] ? rcu_is_watching+0x15/0xb0 [ 908.294422][ T4342] ? __pfx__copy_from_iter+0x10/0x10 [ 908.294446][ T4342] ? netlink_sendmsg+0x650/0xb40 [ 908.294463][ T4342] ? skb_put+0x11b/0x210 [ 908.294486][ T4342] netlink_sendmsg+0x6c0/0xb40 [ 908.294511][ T4342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.294533][ T4342] ? aa_sock_msg_perm+0xf1/0x1b0 [ 908.294560][ T4342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 908.294589][ T4342] ____sys_sendmsg+0x972/0x9f0 [ 908.294618][ T4342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.294647][ T4342] ? import_iovec+0x73/0xa0 [ 908.294670][ T4342] ___sys_sendmsg+0x2a5/0x360 [ 908.294696][ T4342] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.294750][ T4342] ? __fget_files+0x2a/0x420 [ 908.294766][ T4342] ? __fget_files+0x3a0/0x420 [ 908.294791][ T4342] __x64_sys_sendmsg+0x1bd/0x2a0 [ 908.294816][ T4342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.294846][ T4342] ? __pfx_ksys_write+0x10/0x10 [ 908.294876][ T4342] do_syscall_64+0x14d/0xf80 [ 908.294898][ T4342] ? trace_irq_disable+0x3b/0x150 [ 908.294914][ T4342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.294931][ T4342] ? clear_bhb_loop+0x40/0x90 [ 908.294954][ T4342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.294971][ T4342] RIP: 0033:0x7f62a3d9c819 [ 908.294987][ T4342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.295002][ T4342] RSP: 002b:00007f62a4cc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.295021][ T4342] RAX: ffffffffffffffda RBX: 00007f62a4015fa0 RCX: 00007f62a3d9c819 [ 908.295034][ T4342] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 908.295046][ T4342] RBP: 00007f62a4cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 908.295057][ T4342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.295068][ T4342] R13: 00007f62a4016038 R14: 00007f62a4015fa0 R15: 00007ffe84f5d2f8 [ 908.295096][ T4342] [ 908.742826][ T4356] syzkaller0: entered promiscuous mode [ 908.762692][ T4356] syzkaller0: entered allmulticast mode [ 908.822477][ T4368] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8685'. [ 909.235637][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.630997][ T7014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.705899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.714873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.268115][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.276414][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.405127][ T4367] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 910.407505][ T4378] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 910.435082][ T4384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 910.650473][ T4399] bond1: entered promiscuous mode [ 910.657139][ T4399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.731915][ T4404] bond6: entered promiscuous mode [ 910.750070][ T4410] xt_policy: neither incoming nor outgoing policy selected [ 910.750528][ T4404] 8021q: adding VLAN 0 to HW filter on device bond6 [ 910.815131][ T4399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.849723][ T4399] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 910.876344][ T4399] bond1: (slave vcan1): Error -95 calling set_mac_address [ 911.136880][ T4430] validate_nla: 10 callbacks suppressed [ 911.136902][ T4430] netlink: 'syz.5.8704': attribute type 1 has an invalid length. [ 911.477182][ T4442] FAULT_INJECTION: forcing a failure. [ 911.477182][ T4442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.543407][ T4442] CPU: 0 UID: 0 PID: 4442 Comm: syz.1.8711 Not tainted syzkaller #0 PREEMPT(full) [ 911.543439][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 911.543453][ T4442] Call Trace: [ 911.543462][ T4442] [ 911.543472][ T4442] dump_stack_lvl+0xe8/0x150 [ 911.543508][ T4442] should_fail_ex+0x412/0x560 [ 911.543548][ T4442] _copy_from_user+0x2d/0xb0 [ 911.543575][ T4442] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 911.543633][ T4442] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 911.543670][ T4442] ? rcu_is_watching+0x15/0xb0 [ 911.543702][ T4442] ? trace_kmalloc+0x2a/0x110 [ 911.543731][ T4442] ip_generic_getfrag+0x149/0x2d0 [ 911.543760][ T4442] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 911.543789][ T4442] ? __alloc_skb+0x4e5/0x7d0 [ 911.543811][ T4442] ? skb_put+0x11b/0x210 [ 911.543840][ T4442] __ip6_append_data+0x36be/0x3c50 [ 911.543888][ T4442] ? __pfx_raw6_getfrag+0x10/0x10 [ 911.543943][ T4442] ? __pfx___ip6_append_data+0x10/0x10 [ 911.543969][ T4442] ? ip6_setup_cork+0x544/0xf30 [ 911.543995][ T4442] ? ip6_append_data+0x1b7/0x280 [ 911.544023][ T4442] ip6_append_data+0x10f/0x280 [ 911.544067][ T4442] ? __pfx_raw6_getfrag+0x10/0x10 [ 911.544096][ T4442] rawv6_sendmsg+0x12d3/0x18e0 [ 911.544151][ T4442] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 911.544190][ T4442] ? aa_sk_perm+0x6d5/0x900 [ 911.544226][ T4442] ? __pfx_aa_sk_perm+0x10/0x10 [ 911.544257][ T4442] ? sock_rps_record_flow+0x19/0x400 [ 911.544287][ T4442] ? inet_sendmsg+0x2f4/0x370 [ 911.544311][ T4442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 911.544337][ T4442] ____sys_sendmsg+0x80a/0x9f0 [ 911.544372][ T4442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 911.544406][ T4442] ? import_iovec+0x73/0xa0 [ 911.544432][ T4442] ___sys_sendmsg+0x2a5/0x360 [ 911.544463][ T4442] ? __pfx____sys_sendmsg+0x10/0x10 [ 911.544534][ T4442] ? __fget_files+0x2a/0x420 [ 911.544550][ T4442] ? __fget_files+0x3a0/0x420 [ 911.544577][ T4442] __x64_sys_sendmsg+0x1bd/0x2a0 [ 911.544609][ T4442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 911.544642][ T4442] ? __pfx_ksys_write+0x10/0x10 [ 911.544674][ T4442] do_syscall_64+0x14d/0xf80 [ 911.544697][ T4442] ? trace_irq_disable+0x3b/0x150 [ 911.544713][ T4442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.544732][ T4442] ? clear_bhb_loop+0x40/0x90 [ 911.544755][ T4442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.544774][ T4442] RIP: 0033:0x7f12b659c819 [ 911.544791][ T4442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.544806][ T4442] RSP: 002b:00007f12b47f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.544826][ T4442] RAX: ffffffffffffffda RBX: 00007f12b6815fa0 RCX: 00007f12b659c819 [ 911.544840][ T4442] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 911.544852][ T4442] RBP: 00007f12b47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 911.544864][ T4442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.544875][ T4442] R13: 00007f12b6816038 R14: 00007f12b6815fa0 R15: 00007ffca54522f8 [ 911.544904][ T4442] [ 912.043958][ T4464] vlan2: entered allmulticast mode [ 912.049351][ T4464] bond0: entered allmulticast mode [ 912.056683][ T4464] __nla_validate_parse: 6 callbacks suppressed [ 912.056699][ T4464] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8715'. [ 912.072478][ T4464] netlink: 'syz.5.8715': attribute type 1 has an invalid length. [ 912.262526][ T4478] netlink: 240 bytes leftover after parsing attributes in process `syz.5.8720'. [ 912.353638][ T7023] net_ratelimit: 4 callbacks suppressed [ 912.353657][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.386311][ T4482] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 912.556652][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8726'. [ 912.578230][ T4497] netlink: 'syz.1.8726': attribute type 10 has an invalid length. [ 912.605224][ T4493] syzkaller0: entered allmulticast mode [ 912.632569][ T4501] netlink: 'syz.5.8727': attribute type 1 has an invalid length. [ 912.665686][T19787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.696645][ T4501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8727'. [ 912.720282][ T4501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8727'. [ 912.779232][ T4494] syzkaller0: left allmulticast mode [ 912.836780][ T4510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8728'. [ 912.876999][ T4512] netlink: 'syz.0.8730': attribute type 1 has an invalid length. [ 912.887622][ T4514] syzkaller0: entered promiscuous mode [ 912.893137][ T4514] syzkaller0: entered allmulticast mode [ 912.958290][ T4512] bond25: entered promiscuous mode [ 912.964096][ T4512] 8021q: adding VLAN 0 to HW filter on device bond25 [ 913.026740][ T4522] 8021q: adding VLAN 0 to HW filter on device bond25 [ 913.034129][ T4522] bond25: (slave vcan0): The slave device specified does not support setting the MAC address [ 913.046864][ T4522] bond25: (slave vcan0): Error -95 calling set_mac_address [ 913.354524][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8738'. [ 913.386517][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.388635][ T4546] netlink: 'syz.0.8738': attribute type 10 has an invalid length. [ 913.473111][ T4548] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8739'. [ 913.487701][ T4548] IPv6: sit1: Disabled Multicast RS [ 913.494048][ T4548] sit1: entered allmulticast mode [ 913.544500][ T4550] netlink: 'syz.2.8741': attribute type 62 has an invalid length. [ 913.590790][ T4554] netlink: 'syz.1.8740': attribute type 8 has an invalid length. [ 913.598865][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8740'. [ 913.646828][ T4554] bond0: entered promiscuous mode [ 913.663527][ T4554] gretap0: entered promiscuous mode [ 913.682127][ T4554] bond0: left promiscuous mode [ 913.697963][ T4554] gretap0: left promiscuous mode [ 913.720814][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8735'. [ 913.772380][ T4530] xfrm1: entered promiscuous mode [ 913.780634][ T4530] xfrm1: entered allmulticast mode [ 913.877511][ T4569] netlink: 'syz.4.8746': attribute type 39 has an invalid length. [ 913.909952][ T4569] netlink: 'syz.4.8746': attribute type 39 has an invalid length. [ 913.909960][ T29] audit: type=1107 audit(1775307715.871:6): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lw%U3W66/t0?JOOMcXɡ \W{)|&u# +%m+KuV[jt4QIJv͜~:1S~ ̲:-Eaе-EASw0Ok1ojI);S"Q>9[Q(m St;IZ}Mh [ 913.909960][ T29] h8c# [ 913.909960][ T29] M^w`Qg='?A=6HYmFXFXjti"c}H cº35;9 I%VTK$&N$u،0U/U1|L:sjaHrD^-tU-麿q{z\1KB2d-oTDϊPro_L!mAjT`$45VQ8bAX;D3`X@H n %C2+Mܩr, [ 913.909960][ T29] j]CVw Y{YkmBvJ~= [ 930.766832][ T5484] dump_stack_lvl+0xe8/0x150 [ 930.766867][ T5484] should_fail_ex+0x412/0x560 [ 930.766905][ T5484] _copy_from_user+0x2d/0xb0 [ 930.766932][ T5484] __copy_msghdr+0x3c5/0x5b0 [ 930.766964][ T5484] ___sys_sendmsg+0x213/0x360 [ 930.766997][ T5484] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.767029][ T5484] ? kstrtouint+0x6e/0xe0 [ 930.767096][ T5484] ? __fget_files+0x2a/0x420 [ 930.767115][ T5484] ? __fget_files+0x3a0/0x420 [ 930.767145][ T5484] __sys_sendmmsg+0x27c/0x4e0 [ 930.767179][ T5484] ? __pfx___sys_sendmmsg+0x10/0x10 [ 930.767204][ T5484] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 930.767259][ T5484] ? ksys_write+0x242/0x270 [ 930.767285][ T5484] ? __pfx_ksys_write+0x10/0x10 [ 930.767316][ T5484] __x64_sys_sendmmsg+0xa0/0xc0 [ 930.767346][ T5484] do_syscall_64+0x14d/0xf80 [ 930.767373][ T5484] ? trace_irq_disable+0x3b/0x150 [ 930.767392][ T5484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.767414][ T5484] ? clear_bhb_loop+0x40/0x90 [ 930.767440][ T5484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.767462][ T5484] RIP: 0033:0x7f12b659c819 [ 930.767481][ T5484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.767500][ T5484] RSP: 002b:00007f12b47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 930.767523][ T5484] RAX: ffffffffffffffda RBX: 00007f12b6815fa0 RCX: 00007f12b659c819 [ 930.767538][ T5484] RDX: 0000000000000001 RSI: 0000200000003380 RDI: 0000000000000008 [ 930.767551][ T5484] RBP: 00007f12b47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 930.767564][ T5484] R10: 0000000004040880 R11: 0000000000000246 R12: 0000000000000001 [ 930.767577][ T5484] R13: 00007f12b6816038 R14: 00007f12b6815fa0 R15: 00007ffca54522f8 [ 930.767616][ T5484] [ 930.842471][ T5475] lo speed is unknown, defaulting to 1000 [ 930.985986][ T7014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.067050][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.097469][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 931.111602][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 931.119787][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 931.128555][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 931.142630][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 931.390700][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.401057][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 931.528163][ T5513] netlink: 'syz.0.9029': attribute type 9 has an invalid length. [ 931.668653][ T5524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 931.693275][ T5486] lo speed is unknown, defaulting to 1000 [ 931.730794][ T5524] FAULT_INJECTION: forcing a failure. [ 931.730794][ T5524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.773619][ T5524] CPU: 1 UID: 0 PID: 5524 Comm: syz.1.9033 Not tainted syzkaller #0 PREEMPT(full) [ 931.773648][ T5524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 931.773661][ T5524] Call Trace: [ 931.773671][ T5524] [ 931.773680][ T5524] dump_stack_lvl+0xe8/0x150 [ 931.773717][ T5524] should_fail_ex+0x412/0x560 [ 931.773756][ T5524] _copy_from_user+0x2d/0xb0 [ 931.773782][ T5524] ____sys_sendmsg+0x308/0x9f0 [ 931.773820][ T5524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 931.773857][ T5524] ? import_iovec+0x73/0xa0 [ 931.773886][ T5524] ___sys_sendmsg+0x2a5/0x360 [ 931.773919][ T5524] ? __pfx____sys_sendmsg+0x10/0x10 [ 931.773951][ T5524] ? kstrtouint+0x6e/0xe0 [ 931.774024][ T5524] ? __fget_files+0x2a/0x420 [ 931.774042][ T5524] ? __fget_files+0x3a0/0x420 [ 931.774071][ T5524] __sys_sendmmsg+0x27c/0x4e0 [ 931.774121][ T5524] ? __pfx___sys_sendmmsg+0x10/0x10 [ 931.774144][ T5524] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 931.774194][ T5524] ? ksys_write+0x242/0x270 [ 931.774223][ T5524] ? __pfx_ksys_write+0x10/0x10 [ 931.774252][ T5524] __x64_sys_sendmmsg+0xa0/0xc0 [ 931.774278][ T5524] do_syscall_64+0x14d/0xf80 [ 931.774303][ T5524] ? trace_irq_disable+0x3b/0x150 [ 931.774320][ T5524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.774340][ T5524] ? clear_bhb_loop+0x40/0x90 [ 931.774363][ T5524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.774393][ T5524] RIP: 0033:0x7f12b659c819 [ 931.774411][ T5524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.774427][ T5524] RSP: 002b:00007f12b47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 931.774447][ T5524] RAX: ffffffffffffffda RBX: 00007f12b6815fa0 RCX: 00007f12b659c819 [ 931.774461][ T5524] RDX: 0000000000000001 RSI: 0000200000003380 RDI: 0000000000000008 [ 931.774473][ T5524] RBP: 00007f12b47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 931.774484][ T5524] R10: 0000000004040880 R11: 0000000000000246 R12: 0000000000000001 [ 931.774495][ T5524] R13: 00007f12b6816038 R14: 00007f12b6815fa0 R15: 00007ffca54522f8 [ 931.774524][ T5524] [ 932.105621][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.408794][T21648] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 2816 - 0 [ 932.418761][T21648] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 50626 - 0 [ 932.432241][T21648] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 2816 - 0 [ 932.442304][T21648] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 50626 - 0 [ 932.500669][ T999] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 2816 - 0 [ 932.510531][ T999] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 50626 - 0 [ 932.522394][ T5538] netlink: 'syz.0.9037': attribute type 26 has an invalid length. [ 932.542215][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9037'. [ 932.563354][ T5541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9039'. [ 932.578466][ T999] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 2816 - 0 [ 932.587469][ T999] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 50626 - 0 [ 932.596354][ T5541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9039'. [ 932.625944][ T5538] netlink: 'syz.0.9037': attribute type 26 has an invalid length. [ 932.641631][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9037'. [ 932.822486][T21661] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 932.872689][T21661] bond16 (unregistering): (slave ip6gretap2): Releasing active interface [ 933.029126][ T5559] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 933.043109][ T5558] netlink: 'syz.2.9043': attribute type 1 has an invalid length. [ 933.072360][T21661] bond10 (unregistering): (slave gretap2): Releasing active interface [ 933.121158][T21661] bond1 (unregistering): (slave geneve2): Releasing active interface [ 933.155700][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.227661][T32424] Bluetooth: hci5: command tx timeout [ 933.573511][T21661] bond0 (unregistering): Released all slaves [ 933.584471][T21661] bond1 (unregistering): Released all slaves [ 933.598145][T21661] bond2 (unregistering): Released all slaves [ 933.613676][T21661] bond3 (unregistering): Released all slaves [ 933.627732][T21661] bond4 (unregistering): Released all slaves [ 933.649043][T21661] bond5 (unregistering): Released all slaves [ 933.663728][T21661] bond6 (unregistering): Released all slaves [ 933.680989][T21661] bond7 (unregistering): Released all slaves [ 933.696737][T21661] bond8 (unregistering): Released all slaves [ 933.714624][T21661] bond9 (unregistering): Released all slaves [ 933.730545][T21661] bond10 (unregistering): Released all slaves [ 933.744565][T21661] bond11 (unregistering): Released all slaves [ 933.758462][T21661] bond12 (unregistering): Released all slaves [ 933.774191][T21661] bond13 (unregistering): Released all slaves [ 933.806987][T21661] bond14 (unregistering): Released all slaves [ 933.820824][T21661] bond15 (unregistering): Released all slaves [ 933.834677][T21661] bond16 (unregistering): Released all slaves [ 933.850357][T21661] bond17 (unregistering): Released all slaves [ 933.864284][T21661] bond18 (unregistering): Released all slaves [ 933.881656][T21661] bond19 (unregistering): Released all slaves [ 933.896386][T21661] bond20 (unregistering): Released all slaves [ 933.919703][T21661] bond21 (unregistering): Released all slaves [ 933.934950][T21661] bond22 (unregistering): Released all slaves [ 933.950301][T21661] bond23 (unregistering): Released all slaves [ 933.964400][T21661] bond24 (unregistering): Released all slaves [ 933.980397][T21661] bond25 (unregistering): Released all slaves [ 934.014428][ T5558] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 934.030219][ T7003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.188447][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.326430][T21661] tipc: Left network mode [ 934.374429][ T5587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 934.418750][ T5588] xt_ecn: cannot match TCP bits for non-tcp packets [ 934.539943][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9049'. [ 934.564419][ T5595] netlink: 'syz.2.9049': attribute type 10 has an invalid length. [ 934.650647][ T5595] team0: Device vxcan1 is of different type [ 934.683270][T21661] IPVS: stopping backup sync thread 30611 ... [ 934.870570][ T5604] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 935.232094][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.268640][ T5635] netlink: 'syz.1.9054': attribute type 17 has an invalid length. [ 935.277034][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9054'. [ 935.286027][ T5635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9054'. [ 935.308931][T32424] Bluetooth: hci5: command tx timeout [ 935.374148][ T5610] syzkaller0: entered promiscuous mode [ 935.383161][ T5610] syzkaller0: entered allmulticast mode [ 936.280243][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.749709][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 936.757922][ C0] lec:lec_tx_timeout: lec0 [ 937.060058][ T5486] chnl_net:caif_netlink_parms(): no params data found [ 937.067491][T19787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.099312][ T5649] virt_wifi0: entered allmulticast mode [ 937.307847][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.330845][ T5667] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9063'. [ 937.388788][T32424] Bluetooth: hci5: command tx timeout [ 937.405798][ T5668] netlink: 8204 bytes leftover after parsing attributes in process `syz.0.9062'. [ 937.414976][ T5668] openvswitch: netlink: Flow key attr not present in new flow. [ 937.452993][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.462600][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.473379][ T5486] bridge_slave_0: entered allmulticast mode [ 937.488292][ T5486] bridge_slave_0: entered promiscuous mode [ 937.539721][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.561486][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.571195][ T5486] bridge_slave_1: entered allmulticast mode [ 937.595857][ T5486] bridge_slave_1: entered promiscuous mode [ 937.613550][ T5677] : renamed from virt_wifi0 [ 937.643790][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9066'. [ 937.756272][ T5486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.856708][ T5486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.893809][ T5698] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 937.907706][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9070'. [ 937.939145][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9070'. [ 938.045824][T19765] net_ratelimit: 1 callbacks suppressed [ 938.045842][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.140131][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.224688][ T5711] IPv6: addrconf: prefix option has invalid lifetime [ 938.286064][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9074'. [ 938.287706][ T5717] netlink: 'syz.2.9072': attribute type 1 has an invalid length. [ 938.320259][ T5706] syzkaller0: entered promiscuous mode [ 938.336542][ T5719] netlink: 'syz.0.9074': attribute type 10 has an invalid length. [ 938.350236][ T5706] syzkaller0: entered allmulticast mode [ 938.351465][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.417086][ T5486] team0: Port device team_slave_0 added [ 938.473028][ T5486] team0: Port device team_slave_1 added [ 938.696049][ T5730] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9076'. [ 938.718411][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9077'. [ 939.385912][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.469074][T32424] Bluetooth: hci5: command tx timeout [ 939.707233][T19787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.112096][T19787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.371239][T21661] hsr_slave_0: left promiscuous mode [ 940.436931][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.475131][ T5760] netlink: 'syz.5.9085': attribute type 11 has an invalid length. [ 940.486082][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9085'. [ 940.722833][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9085'. [ 940.865072][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.889700][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.929077][ T5486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.958114][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.965191][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.005200][ T5486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.087307][ T5486] hsr_slave_0: entered promiscuous mode [ 941.094355][ T5486] hsr_slave_1: entered promiscuous mode [ 941.134512][ T5777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 941.230079][ T5791] IPVS: set_ctl: invalid protocol: 41 172.30.0.3:20002 [ 941.264864][ T5790] Cannot find add_set index 65532 as target [ 941.418326][ T5794] xt_TCPMSS: Only works on TCP SYN packets [ 941.465631][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.490717][ T5799] bond0: Caught tx_queue_len zero misconfig [ 941.524865][ T5801] netlink: 'syz.0.9096': attribute type 10 has an invalid length. [ 941.589701][ T5801] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 941.601586][T21661] IPVS: stop unused estimator thread 0... [ 941.729223][ T5486] netdevsim netdevsim4 eth8 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 941.742291][ T5814] netlink: 'syz.5.9097': attribute type 8 has an invalid length. [ 941.759305][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9097'. [ 941.767860][ T5486] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 50626 - 0 [ 941.839083][ T5814] gretap0: entered promiscuous mode [ 941.867357][ T5814] gretap0: left promiscuous mode [ 941.897747][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9098'. [ 942.038584][ T5486] netdevsim netdevsim4 eth7 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 942.059718][ T5486] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 50626 - 0 [ 942.104953][ T5838] netlink: 'syz.1.9102': attribute type 10 has an invalid length. [ 942.239540][ T5486] netdevsim netdevsim4 eth6 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 942.273774][ T5486] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 50626 - 0 [ 942.498694][ T5486] netdevsim netdevsim4 eth5 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 942.514442][ T5486] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 50626 - 0 [ 942.670536][ T5863] __nla_validate_parse: 1 callbacks suppressed [ 942.670556][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9109'. [ 942.817694][ T5884] netlink: 'syz.1.9112': attribute type 1 has an invalid length. [ 943.147867][ T7014] net_ratelimit: 3 callbacks suppressed [ 943.147884][ T7014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.558277][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.586951][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.330058][ T5850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.361558][ T5486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 945.406846][ T5486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 945.458943][ T5486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 945.488866][ T5486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 945.508924][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9117'. [ 945.518270][ T5957] netlink: 'syz.1.9114': attribute type 2 has an invalid length. [ 945.537316][ T5960] netlink: 'syz.5.9117': attribute type 10 has an invalid length. [ 945.550703][ T5960] team0: Port device vxcan1 added [ 945.628978][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.657757][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9116'. [ 945.714105][ T5975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9116'. [ 945.820496][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.849915][ T5981] bridge_slave_0: left allmulticast mode [ 945.860424][ T5981] bridge_slave_0: left promiscuous mode [ 945.869180][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.906950][ T5981] bridge_slave_1: left allmulticast mode [ 945.913863][ T5981] bridge_slave_1: left promiscuous mode [ 945.925552][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.954733][ T5981] bond0: (slave bond_slave_0): Releasing backup interface [ 945.980733][ T5981] bond0: (slave bond_slave_1): Releasing backup interface [ 946.010707][ T5981] team0: Port device team_slave_0 removed [ 946.042856][ T5981] team0: Port device team_slave_1 removed [ 946.057982][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.066796][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.076796][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.084287][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.094578][ T5981] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 946.160134][ T5486] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.186268][T21648] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.192496][T19787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.193742][T21648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.250851][T21648] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.258129][T21648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.272066][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9126'. [ 946.340009][ T5486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 946.358565][ T5486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.393367][ T6005] syzkaller0: entered promiscuous mode [ 946.399951][ T6005] syzkaller0: entered allmulticast mode [ 946.831725][ T5486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.857575][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.943695][ T6027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 947.249288][ T6050] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9140'. [ 947.403965][ T5486] veth0_vlan: entered promiscuous mode [ 947.418494][ T5486] veth1_vlan: entered promiscuous mode [ 947.453156][ T5486] veth0_macvtap: entered promiscuous mode [ 947.506841][ T5486] veth1_macvtap: entered promiscuous mode [ 947.522845][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9144'. [ 947.552159][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.569938][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.627344][ T6069] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9148'. [ 947.638502][ T6070] netlink: 'syz.5.9146': attribute type 1 has an invalid length. [ 947.699616][ T6070] bond8: entered promiscuous mode [ 947.704712][ T6070] bond8: entered allmulticast mode [ 947.714836][ T6070] 8021q: adding VLAN 0 to HW filter on device bond8 [ 947.748490][ T6074] macvlan2: entered promiscuous mode [ 947.753888][ T6074] macvlan2: entered allmulticast mode [ 947.788893][ T6074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 947.822433][T21661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.846429][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9150'. [ 947.856897][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9150'. [ 947.866902][ T6082] mac80211_hwsim hwsim98 wlan1: Caught tx_queue_len zero misconfig [ 947.877057][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.887493][T21661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.898542][T21661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.028533][ T6091] netlink: 'syz.5.9153': attribute type 1 has an invalid length. [ 948.036677][ T6091] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9153'. [ 948.058780][T21661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.223761][ T6097] tc_dump_action: action bad kind [ 948.229776][T21651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.244743][T21651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.359737][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.369710][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9155'. [ 948.380982][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.398674][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9157'. [ 948.417414][ T6104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9158'. [ 948.451730][ T6104] nbd: must specify at least one socket [ 948.457513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.771741][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.782794][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.794739][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.803750][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.812472][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.863045][ T6121] lo speed is unknown, defaulting to 1000 [ 948.906562][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.055727][ T6124] syzkaller0: entered promiscuous mode [ 949.061358][ T6124] syzkaller0: entered allmulticast mode [ 949.067684][ T6127] netlink: 'syz.5.9164': attribute type 1 has an invalid length. [ 949.154525][ T6127] bond9: (slave geneve3): making interface the new active one [ 949.163765][ T6127] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 949.227383][ T3786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.268652][T21662] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 949.278667][T21662] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 949.309177][ T3786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.572501][ T6138] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9167'. [ 949.609899][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9167'. [ 949.963176][T19765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.761761][T21662] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 950.781540][T21662] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 950.816890][ T6141] tipc: Started in network mode [ 950.835175][T32424] Bluetooth: hci1: command tx timeout [ 950.842482][ T6141] tipc: Node identity ac141441, cluster identity 4711 [ 950.859716][ T6141] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 950.876535][ T6141] tipc: Enabled bearer , priority 10 [ 950.995754][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 951.031355][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9169'. [ 951.080153][T21648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.103048][T21648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.121791][T21648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 951.134026][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9173'. [ 951.143095][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 951.275322][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 951.285730][T21648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.296596][T21648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.308525][T21648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 951.371894][ T6168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 951.379209][ T6168] IPv6: NLM_F_CREATE should be set when creating new route [ 951.415808][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 951.470472][T21648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.492509][T21648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.511536][T21648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 951.621477][T21648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.638027][T21648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.649001][T21648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 951.831737][ T7287] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 2816 - 0 [ 951.878955][ T7287] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 50626 - 0 [ 951.908836][ T6121] chnl_net:caif_netlink_parms(): no params data found [ 951.936458][T21662] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 2816 - 0 [ 951.964989][T21662] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 50626 - 0 [ 952.091024][ T3786] tipc: Node number set to 2886997057 [ 952.134689][ T7288] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 2816 - 0 [ 952.160913][ T7288] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 50626 - 0 [ 952.219901][T21662] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 2816 - 0 [ 952.231356][T21662] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 50626 - 0 [ 952.268117][ T6208] team0: Port device vxcan1 removed [ 952.489081][ T6233] netlink: 'syz.5.9195': attribute type 24 has an invalid length. [ 952.906089][T32424] Bluetooth: hci1: command tx timeout [ 953.044773][T21648] bond2 (unregistering): (slave geneve3): Releasing active interface [ 953.113002][T21648] team0: Port device bridge1 removed [ 953.159807][T21648] bond17 (unregistering): (slave bridge2): Releasing backup interface [ 953.168218][T21648] bridge2 (unregistering): left promiscuous mode [ 953.174915][T21648] bridge2 (unregistering): left allmulticast mode [ 953.230345][ T6261] IPVS: length: 8 != 1152 [ 953.334198][T21648] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 953.346196][T21648] bond0 (unregistering): Released all slaves [ 953.360765][T21648] bond1 (unregistering): Released all slaves [ 953.385032][T21648] bond2 (unregistering): Released all slaves [ 953.400832][T21648] bond3 (unregistering): Released all slaves [ 953.419422][T21648] bond4 (unregistering): Released all slaves [ 953.434918][T21648] bond5 (unregistering): (slave vxcan3): Releasing backup interface [ 953.446597][T21648] bond5 (unregistering): Released all slaves [ 953.461854][T21648] bond6 (unregistering): Released all slaves [ 953.476454][T21648] bond7 (unregistering): Released all slaves [ 953.491183][T21648] bond8 (unregistering): Released all slaves [ 953.509662][T21648] bond9 (unregistering): Released all slaves [ 953.524304][T21648] bond10 (unregistering): Released all slaves [ 953.540220][T21648] bond11 (unregistering): Released all slaves [ 953.561154][T21648] bond12 (unregistering): Released all slaves [ 953.575330][T21648] bond13 (unregistering): Released all slaves [ 953.593990][T21648] bond14 (unregistering): Released all slaves [ 953.614430][T21648] bond15 (unregistering): Released all slaves [ 953.633937][T21648] bond16 (unregistering): Released all slaves [ 953.651788][T21648] bond17 (unregistering): Released all slaves [ 953.667118][T21648] bond18 (unregistering): Released all slaves [ 953.683354][T21648] bond19 (unregistering): Released all slaves [ 953.701857][T21648] bond20 (unregistering): Released all slaves [ 953.719328][T21648] bond21 (unregistering): Released all slaves [ 953.736892][T21648] bond22 (unregistering): Released all slaves [ 953.751413][T21648] bond23 (unregistering): Released all slaves [ 953.771582][T21648] bond24 (unregistering): Released all slaves [ 953.786772][T21648] bond25 (unregistering): Released all slaves [ 953.803677][T21648] bond26 (unregistering): Released all slaves [ 953.817691][T21648] bond27 (unregistering): Released all slaves [ 953.839729][T21648] bond28 (unregistering): Released all slaves [ 953.875839][ T6240] net_ratelimit: 11 callbacks suppressed [ 953.875857][ T6240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.945331][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 953.999313][ T6265] __nla_validate_parse: 6 callbacks suppressed [ 953.999330][ T6265] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9203'. [ 954.019246][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.037508][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.063319][ T6121] bridge_slave_0: entered allmulticast mode [ 954.073035][ T6121] bridge_slave_0: entered promiscuous mode [ 954.103417][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.112650][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.122225][ T6121] bridge_slave_1: entered allmulticast mode [ 954.134726][ T6121] bridge_slave_1: entered promiscuous mode [ 954.186459][ T6267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 954.311690][ T6121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.344422][ T6269] netlink: 'syz.2.9204': attribute type 21 has an invalid length. [ 954.346572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.364496][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9204'. [ 954.407864][ T6121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.538505][ T6285] netlink: 'syz.1.9211': attribute type 5 has an invalid length. [ 954.570733][ T6285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9211'. [ 954.597323][ T6285] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9211'. [ 954.654951][ T6121] team0: Port device team_slave_0 added [ 954.675229][ T6121] team0: Port device team_slave_1 added [ 954.808358][ T6299] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 954.932879][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.973849][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.992305][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 955.001972][T32424] Bluetooth: hci1: command tx timeout [ 955.012728][ T6121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.026013][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.033076][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.063693][ T6121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.215110][ T6304] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 955.229271][ T6314] netlink: 'syz.1.9216': attribute type 1 has an invalid length. [ 955.334589][ T6314] bond20: entered promiscuous mode [ 955.348522][ T6314] 8021q: adding VLAN 0 to HW filter on device bond20 [ 955.385440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.410450][ T6121] hsr_slave_0: entered promiscuous mode [ 955.427502][ T6121] hsr_slave_1: entered promiscuous mode [ 955.433931][ T6121] debugfs: 'hsr0' already exists in 'hsr' [ 955.460531][ T6121] Cannot create hsr debugfs directory [ 955.584991][ T6320] 8021q: adding VLAN 0 to HW filter on device bond20 [ 955.618334][ T6320] bond20: (slave vcan1): The slave device specified does not support setting the MAC address [ 955.642517][ T6320] bond20: (slave vcan1): Error -95 calling set_mac_address [ 955.895443][ T6335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.980365][ T6333] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9217'. [ 956.025477][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 956.268266][T21648] hsr_slave_0: left promiscuous mode [ 956.289073][T21648] hsr_slave_1: left promiscuous mode [ 956.304545][T21648] veth0_macvtap: left allmulticast mode [ 956.320805][T21648] veth1_macvtap: left promiscuous mode [ 956.326864][T21648] veth0_macvtap: left promiscuous mode [ 956.332443][T21648] veth1_vlan: left promiscuous mode [ 956.345826][T21648] veth0_vlan: left promiscuous mode [ 956.354584][ T6351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9223'. [ 956.522203][T21648] team0 (unregistering): Port device batadv1 removed [ 956.576695][T21661] smc: removing ib device syz1 [ 957.069460][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 957.075650][T32424] Bluetooth: hci1: command tx timeout [ 958.105343][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 958.166681][T19765] ================================================================== [ 958.174803][T19765] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 958.183580][T19765] Read of size 8 at addr ffff88807a4122f0 by task kworker/1:1/19765 [ 958.191563][T19765] [ 958.193908][T19765] CPU: 1 UID: 0 PID: 19765 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 958.193938][T19765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.193950][T19765] Workqueue: infiniband ib_cache_event_task [ 958.193976][T19765] Call Trace: [ 958.193983][T19765] [ 958.193990][T19765] dump_stack_lvl+0xe8/0x150 [ 958.194024][T19765] print_report+0xba/0x230 [ 958.194042][T19765] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 958.194060][T19765] kasan_report+0x117/0x150 [ 958.194089][T19765] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 958.194131][T19765] __ethtool_get_link_ksettings+0x5e/0x170 [ 958.194153][T19765] ib_get_eth_speed+0x180/0x7f0 [ 958.194199][T19765] ? rxe_query_port+0x7e/0x3d0 [ 958.194221][T19765] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 958.194249][T19765] ? do_raw_spin_unlock+0xf5/0x210 [ 958.194265][T19765] ? rxe_query_port+0x6b/0x3d0 [ 958.194288][T19765] rxe_query_port+0x93/0x3d0 [ 958.194311][T19765] ib_query_port+0x170/0x830 [ 958.194328][T19765] ib_cache_update+0x1ba/0xc70 [ 958.194353][T19765] ? do_raw_spin_lock+0x12b/0x2f0 [ 958.194368][T19765] ? __pfx_ib_cache_update+0x10/0x10 [ 958.194388][T19765] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 958.194411][T19765] ib_cache_event_task+0xe0/0x1d0 [ 958.194431][T19765] ? process_scheduled_works+0xa8d/0x18c0 [ 958.194452][T19765] process_scheduled_works+0xb6e/0x18c0 [ 958.194483][T19765] ? __pfx_process_scheduled_works+0x10/0x10 [ 958.194505][T19765] ? assign_work+0x3d5/0x5e0 [ 958.194525][T19765] worker_thread+0xa53/0xfc0 [ 958.194556][T19765] kthread+0x388/0x470 [ 958.194570][T19765] ? __pfx_worker_thread+0x10/0x10 [ 958.194589][T19765] ? __pfx_kthread+0x10/0x10 [ 958.194603][T19765] ret_from_fork+0x51e/0xb90 [ 958.194624][T19765] ? __pfx_ret_from_fork+0x10/0x10 [ 958.194642][T19765] ? __switch_to+0xc7d/0x1450 [ 958.194660][T19765] ? __pfx_kthread+0x10/0x10 [ 958.194674][T19765] ret_from_fork_asm+0x1a/0x30 [ 958.194703][T19765] [ 958.194708][T19765] [ 958.386277][T19765] Allocated by task 27352: [ 958.390782][T19765] kasan_save_track+0x3e/0x80 [ 958.395470][T19765] __kasan_kmalloc+0x93/0xb0 [ 958.400080][T19765] __kvmalloc_node_noprof+0x528/0x8a0 [ 958.405513][T19765] alloc_netdev_mqs+0xa6/0x11b0 [ 958.410375][T19765] rtnl_create_link+0x31f/0xd70 [ 958.415232][T19765] rtnl_newlink_create+0x277/0xb70 [ 958.420350][T19765] rtnl_newlink+0x166a/0x1bb0 [ 958.425029][T19765] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 958.429978][T19765] netlink_rcv_skb+0x232/0x4b0 [ 958.434744][T19765] netlink_unicast+0x80f/0x9b0 [ 958.439516][T19765] netlink_sendmsg+0x813/0xb40 [ 958.444281][T19765] __sys_sendto+0x672/0x710 [ 958.448801][T19765] __x64_sys_sendto+0xde/0x100 [ 958.453570][T19765] do_syscall_64+0x14d/0xf80 [ 958.458169][T19765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.464078][T19765] [ 958.466424][T19765] Freed by task 21648: [ 958.470491][T19765] kasan_save_track+0x3e/0x80 [ 958.475187][T19765] kasan_save_free_info+0x46/0x50 [ 958.480227][T19765] __kasan_slab_free+0x5c/0x80 [ 958.484999][T19765] kfree+0x1c1/0x630 [ 958.488908][T19765] device_release+0xc4/0x1f0 [ 958.493529][T19765] kobject_put+0x228/0x560 [ 958.497958][T19765] netdev_run_todo+0xc75/0xde0 [ 958.502737][T19765] default_device_exit_batch+0x986/0xa00 [ 958.508376][T19765] ops_undo_list+0x52b/0x940 [ 958.512981][T19765] cleanup_net+0x56b/0x800 [ 958.517405][T19765] process_scheduled_works+0xb6e/0x18c0 [ 958.522972][T19765] worker_thread+0xa53/0xfc0 [ 958.527598][T19765] kthread+0x388/0x470 [ 958.531670][T19765] ret_from_fork+0x51e/0xb90 [ 958.536284][T19765] ret_from_fork_asm+0x1a/0x30 [ 958.541068][T19765] [ 958.543403][T19765] The buggy address belongs to the object at ffff88807a412000 [ 958.543403][T19765] which belongs to the cache kmalloc-cg-4k of size 4096 [ 958.557732][T19765] The buggy address is located 752 bytes inside of [ 958.557732][T19765] freed 4096-byte region [ffff88807a412000, ffff88807a413000) [ 958.571637][T19765] [ 958.573972][T19765] The buggy address belongs to the physical page: [ 958.580401][T19765] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a410 [ 958.589172][T19765] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 958.597674][T19765] memcg:ffff88807a411011 [ 958.601914][T19765] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 958.609462][T19765] page_type: f5(slab) [ 958.613451][T19765] raw: 00fff00000000040 ffff88813fe02500 dead000000000100 dead000000000122 [ 958.622040][T19765] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88807a411011 [ 958.630659][T19765] head: 00fff00000000040 ffff88813fe02500 dead000000000100 dead000000000122 [ 958.639339][T19765] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88807a411011 [ 958.648010][T19765] head: 00fff00000000003 ffffea0001e90401 00000000ffffffff 00000000ffffffff [ 958.656681][T19765] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 958.665352][T19765] page dumped because: kasan: bad access detected [ 958.671815][T19765] page_owner tracks the page as allocated [ 958.677541][T19765] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25549, tgid 25549 (syz.1.5615), ts 588582320193, free_ts 588400330913 [ 958.699165][T19765] post_alloc_hook+0x231/0x280 [ 958.703946][T19765] get_page_from_freelist+0x24dc/0x2580 [ 958.709520][T19765] __alloc_frozen_pages_noprof+0x18d/0x380 [ 958.715336][T19765] allocate_slab+0x77/0x660 [ 958.719850][T19765] refill_objects+0x331/0x3c0 [ 958.724531][T19765] __pcs_replace_empty_main+0x2e6/0x730 [ 958.730082][T19765] __kvmalloc_node_noprof+0x657/0x8a0 [ 958.735463][T19765] futex_hash_allocate+0x44d/0xe80 [ 958.740586][T19765] copy_process+0x23d7/0x3cd0 [ 958.745285][T19765] kernel_clone+0x248/0x8e0 [ 958.749811][T19765] __se_sys_clone3+0x33c/0x360 [ 958.754597][T19765] do_syscall_64+0x14d/0xf80 [ 958.759206][T19765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.765110][T19765] page last free pid 22332 tgid 22329 stack trace: [ 958.771606][T19765] __free_frozen_pages+0xc2b/0xdb0 [ 958.776728][T19765] __slab_free+0x263/0x2b0 [ 958.781157][T19765] qlist_free_all+0x97/0x100 [ 958.785774][T19765] kasan_quarantine_reduce+0x148/0x160 [ 958.791270][T19765] __kasan_slab_alloc+0x22/0x80 [ 958.796151][T19765] __kmalloc_cache_noprof+0x2ba/0x660 [ 958.801529][T19765] uprobe_register+0x1a8/0x950 [ 958.806298][T19765] bpf_uprobe_multi_link_attach+0xcd0/0x1020 [ 958.812281][T19765] link_create+0x673/0x850 [ 958.816712][T19765] __sys_bpf+0x468/0x950 [ 958.820959][T19765] __x64_sys_bpf+0x7c/0x90 [ 958.825390][T19765] do_syscall_64+0x14d/0xf80 [ 958.829997][T19765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.835897][T19765] [ 958.838235][T19765] Memory state around the buggy address: [ 958.843869][T19765] ffff88807a412180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.851959][T19765] ffff88807a412200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.860023][T19765] >ffff88807a412280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 958.868091][T19765] ^ [ 958.875841][T19765] ffff88807a412300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.883917][T19765] ffff88807a412380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.891993][T19765] ================================================================== [ 958.946503][T19765] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 958.953865][T19765] CPU: 1 UID: 0 PID: 19765 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 958.963357][T19765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.973456][T19765] Workqueue: infiniband ib_cache_event_task [ 958.979403][T19765] Call Trace: [ 958.982700][T19765] [ 958.985648][T19765] vpanic+0x56c/0xa60 [ 958.989655][T19765] ? __pfx_vpanic+0x10/0x10 [ 958.994194][T19765] ? __pfx___schedule+0x10/0x10 [ 958.999082][T19765] panic+0xc5/0xd0 [ 959.002828][T19765] ? __pfx_panic+0x10/0x10 [ 959.007256][T19765] ? preempt_schedule_common+0x82/0xd0 [ 959.012734][T19765] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 959.018731][T19765] check_panic_on_warn+0x89/0xb0 [ 959.023688][T19765] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 959.029689][T19765] end_report+0x73/0x180 [ 959.033952][T19765] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 959.039973][T19765] kasan_report+0x128/0x150 [ 959.044501][T19765] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 959.050506][T19765] __ethtool_get_link_ksettings+0x5e/0x170 [ 959.056329][T19765] ib_get_eth_speed+0x180/0x7f0 [ 959.061250][T19765] ? rxe_query_port+0x7e/0x3d0 [ 959.066030][T19765] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 959.071428][T19765] ? do_raw_spin_unlock+0xf5/0x210 [ 959.076548][T19765] ? rxe_query_port+0x6b/0x3d0 [ 959.081328][T19765] rxe_query_port+0x93/0x3d0 [ 959.085949][T19765] ib_query_port+0x170/0x830 [ 959.090553][T19765] ib_cache_update+0x1ba/0xc70 [ 959.095339][T19765] ? do_raw_spin_lock+0x12b/0x2f0 [ 959.100395][T19765] ? __pfx_ib_cache_update+0x10/0x10 [ 959.105697][T19765] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 959.111081][T19765] ib_cache_event_task+0xe0/0x1d0 [ 959.116117][T19765] ? process_scheduled_works+0xa8d/0x18c0 [ 959.121847][T19765] process_scheduled_works+0xb6e/0x18c0 [ 959.127418][T19765] ? __pfx_process_scheduled_works+0x10/0x10 [ 959.133410][T19765] ? assign_work+0x3d5/0x5e0 [ 959.138016][T19765] worker_thread+0xa53/0xfc0 [ 959.142641][T19765] kthread+0x388/0x470 [ 959.146730][T19765] ? __pfx_worker_thread+0x10/0x10 [ 959.151855][T19765] ? __pfx_kthread+0x10/0x10 [ 959.156453][T19765] ret_from_fork+0x51e/0xb90 [ 959.161065][T19765] ? __pfx_ret_from_fork+0x10/0x10 [ 959.166189][T19765] ? __switch_to+0xc7d/0x1450 [ 959.170872][T19765] ? __pfx_kthread+0x10/0x10 [ 959.175485][T19765] ret_from_fork_asm+0x1a/0x30 [ 959.180285][T19765] [ 959.183990][T19765] Kernel Offset: disabled [ 959.188357][T19765] Rebooting in 86400 seconds..