last executing test programs: 2.370855059s ago: executing program 2 (id=10320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0800080007030300020014"], 0xf86) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="017f87cbadc2bf7685680fd764268d462f5a9bfd1fbe2d7cce579ad87cdd3af1e265b81469b01f855ac1ef28ab891939e1aac7ffe9f912c6b22858c2b58c0f72291b9292e2f0e3f21aa3e356134d32fa89f6b57fcf632bb117c4820aa2e59792ee9ac9ad840e59e63472370624cc13427836db05f6a22b91b86243df2fe8220fda7b284e219846318fad288a5cbed712dd30976759a91d811b5a28811e2f785c812c4afdd110f3f275ef9fb8d9002a062b33faef9af9ab87364c3de9e5aa1774fd6d90e44642", 0xc6}, {&(0x7f0000000180)="961d2fc137d973f4c203d34913a76dc948d965728a20b7647f5c473f081c45a0e8527f87d9f3ee57cf788c73082ade81eec9", 0x32}, {&(0x7f0000000340)="51fd52d4bdfb8e2f5df01851d93e2754cc44f8a34da1d47ec1e3d526d63a54e8a6badc0c12d80ac92086a110d0732b71a55aee0f0a558ab10b5f87f3861a7516f6d10f833ee7188a91f5baf525126d82084a3e7fdd2d0ea5be7bd828dc73a2249113a6c2ff4e64aadb518b01a1d759d335c8311392a217fa6e2170bfb336647042bf04a214fba49e573cca63678166ab952fcda50f0bfc58b6b2f6ba631dd2aaeb6da3119e4ec1ebc1abc4a7d7c7", 0xae}, {&(0x7f0000000440)="1ad5f6cbf9023a257f133a0eb5e682618b41c1fe46326b773a47d0a1a8e8ed605f270d47e532e39c2903011a18e326c8b0e8fe9ee71c4d40ccdc67be681ecbd1717b61716660cb1b318793e2209a5d65304a44d0033149ad", 0x58}, {&(0x7f00000004c0)="5da8e3297429dcdc3d5ccca0fc87123616b49d63e331288b43851b6b676b79f8afc363849ed7222f6b08e4fe4f9cbfdd5cc2fb976829cc5ddd6b915590cefe6c0bb299038d4bf5922a48d464d2b748cfdee9f81e480ac9c54b8bf0cd1c", 0x5d}, {&(0x7f0000000540)="00419a306ac16e41bf1f0c9227a9a926d91eb594c4182eea27fb52377fc8e25fe85ebf7eaa246acba1fef4b6640a6423251c0d761ebe4a5f37f1fcdf4bd156d911776a04a4746359916eb2ed9cd96f47b17aaca55d47b49ea44f085b2159f14b403282fac5dac11cc7f5e95dfd2f9d8bb0d0900bfc3ada505b687d78142cd72b8c76d6bb38a6e17f65f8903acf5c2704e8dc989728539ec55e437653bd9120274bbc21c563906444346bfcddd1e48c19474353fa9e71966cc1839f19902e1e3066d8ec77d7d7f42c5e8d99c2d831b3535d214e833c02567e76aa100043f084115ce39bee86c0f945", 0xe8}], 0x6}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req={0x4, 0x401, 0xdb, 0x7fff}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 2.001810213s ago: executing program 3 (id=10323): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f4", 0x2d}], 0x1}}], 0x1, 0xc044) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 1.678951019s ago: executing program 3 (id=10326): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(r2, 0x0, 0x152) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) connect$can_j1939(r1, &(0x7f0000000140), 0x18) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x1) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r7, 0x7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x100) socket$inet(0xa, 0x801, 0x84) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) shutdown(r0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'dvmrp1\x00', {0x5}, 0xd19}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.569264387s ago: executing program 2 (id=10329): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xf9, 0x8, 0x40, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7, 0x10, 0x6, 0x8}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.567347882s ago: executing program 3 (id=10330): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.402942584s ago: executing program 0 (id=10332): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @remote}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES16=r0], 0x6b}, 0x8080) close(0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.364488016s ago: executing program 0 (id=10333): syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.331820858s ago: executing program 3 (id=10334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r5}, 0x14) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x62, 0xe, '\x00', [@pad1, @pad1, @padn, @ra={0x5, 0x2, 0x5}, @generic={0xbb, 0x66, "b436ecfc36e4f4e47550f43f8cb1dc8d53a6c06b00cefb1c1a806d401bf56d81985b94a962da2a54a3fd7ba2f3d3afbfe5cdd5398c35ff8525224f36b2620e476bb652b5a8625081991e5db5259a676bd271a587be523aad4718e072f58621cddb2a3204d7b1"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x84, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}}}], 0xd8}}], 0x1, 0x20048001) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r5}, 0x14) (async) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x62, 0xe, '\x00', [@pad1, @pad1, @padn, @ra={0x5, 0x2, 0x5}, @generic={0xbb, 0x66, "b436ecfc36e4f4e47550f43f8cb1dc8d53a6c06b00cefb1c1a806d401bf56d81985b94a962da2a54a3fd7ba2f3d3afbfe5cdd5398c35ff8525224f36b2620e476bb652b5a8625081991e5db5259a676bd271a587be523aad4718e072f58621cddb2a3204d7b1"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x84, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}}}], 0xd8}}], 0x1, 0x20048001) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (async) 1.239590776s ago: executing program 1 (id=10335): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e, 0x10}]}, 0x38}}, 0x8000) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x3]}, 0x6) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.199562946s ago: executing program 0 (id=10336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000b30d696200000fff916111b556e5395ab80904779792d458e04423869cc3f8544993badd23765a00"/56, @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b00"], 0x20}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x3, 0xfffffffc}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f00000001c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="4a653220c732d8f5461478f8736df36bc39b3342743dda5fc2c03c5a86a8af911d0c9b6b61cdab3ee3112668b6", 0x2d}, {&(0x7f0000000280)="305589875ffc8f086ee36f8a30b3e86c26118b88d7", 0x15}, {&(0x7f00000002c0)="154215318272231877bba7b1f1bd1ac3d5751d4ef5fd9b0c940bda2cf2be5d80fa9f0e92d766833e5655d29a82171063f66fea9241813ef82cef4e7b0eac4ee0248c0521c1cadb78c197fc2bde617d7dd4005d2022b8003eb310fec822b512005ee262cd6224eb6c1d896830b1a4b8946bc857f87e32041c99a6e193da8ae2cda5f08a411351d9158297a2e5431486ad5f79", 0x92}, {&(0x7f0000000380)="d52f24bcf051cf22f6283f3ef6b66626f73b8f6a5065b1be71babb5b8bafff4eaf23068dd1fb9fe6295776115f6e1d84ba7f4a226b892ee7d4fed1ddc6e0ab8fcb3445dc4d7e8b66fc1b025ffbd505290dc341efed195d", 0x57}], 0x4}, 0x4000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f00000000c0)) socket(0x11, 0xa, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r12, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) preadv(r8, 0x0, 0x0, 0xfffffffc, 0x9) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r13, 0x89e8) close(0x4) 1.158560762s ago: executing program 4 (id=10337): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01"], 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x15, 0xc, "48803ada4d3e5fb5d18ea83252583bfe85"}]}, @NFT_MSG_NEWSETELEM={0x2de8, 0xc, 0xa, 0x6a08a4dfee95d441, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2dc8, 0x3, 0x0, 0x1, [{0x4}, {0x16bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1a564eac}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x490b11a763db6d06}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x138c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "c32de887eb7dc9175287bfc0dc213ee8857d7131c3841a7192215302e348b02fd9d8255502391555ae90458eb594c1b6577f346e292691b5d96942ed3454f7527d33a49129675d0e5eee3383275be989cfe46fd2a64f259a221323ddc3ea577e33cdc9302b32bd4b1b5f3a2161fba42ea6f12dff10d1"}, @NFTA_DATA_VALUE={0x8a, 0x1, "91013abf4f30db9851167ca022d32f03a4f8087d63c561d0a94c6f91778cb1d526a4f9bd773f96506ef686c6619c8b14839d59a2d1063c8361c40816c98b5ede6f6f4134fa21cdaa6c3d46f78ada5cd9ea5ff23017f0038c346f9419a2065e2d9e96ee077fee8a33da0677c87a33af41129cb931188d2dc90ac2a43810c0347f3ff7b1880732"}, @NFTA_DATA_VALUE={0x26, 0x1, "367944e2adfc2f5bcc9d41d801718d5dae90e8ce8789a064ad69d56183004e2f2098"}, @NFTA_DATA_VALUE={0xd7, 0x1, "d69921a690dc8753b46462d337e7e71af25505f81cbab30d95cfa73fccc89999fa6dfdf11d80602f7a5189991913a369f978e2a7c27aab2c32325d0eb3f438caa9e3701b215eb8cd71411850db4ca04f9a0f78ca1eba669fe0c395285751689b575273b29df9cbcd58183f4ed0d93a990cde02c578461e7ae5e5c08f9343a7bb86bcb58079662fb87232c8323c6b46dda935bde878d34b1f0b0aedb733609276d4ff4ea0ef351d99c0df5b6b12526f0a6c6539ccf0b9636a6da52da65bb96d4abc0d0ddb31d5d317a0cc452ae3afa8af846bd9"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf4, 0x1, "4070b7d8b979f88ee489cae6c9d9b9e923404f24f8da80350c3c8bad3d79ec949813ba0d3c0c596b662aba53e12f430df43bcece74775798e242e1645abc357b1a2d65f8cf80787460bab7190febe7e7864431410c0fbf9876f2a1f65bf1d36636d3a5ec37477d06089e41ac691afeff6a5aa1c3112ec392a98b12a788686b7d5369ab16d950a63878d49fea47a1e61bce259ac2ce6e2349dfdf5c4e44923f3fdd16f7a8818da0f1546fa1924d3a86b98a72cc097297737a5935d5d7cc4e34a05c621bfdec1bae9981944680b8e51a030c028bd33d37e3fac82cb014c90096e1213f9f656872d569f47acaf8500ab7cf"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_EXPRESSIONS={0x214, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x188, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x178, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x174, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "83099a9ec0c3d05012c7f6e11183955433249629d8a5172f55f2ab109ec5474aaa92008f67324612da6401231a6b59dd47a7f6"}, @NFTA_DATA_VALUE={0xc, 0x1, "3171bd72e685ca96"}, @NFTA_DATA_VALUE={0x5, 0x1, '@'}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x59, 0x1, "56154bcadd93b8553ac13a311aeff09ad8bba6aa9346fed05dd8d244e949d15a675ca01b01dd08d963e12ded184e84f57bccaf9e2e3c0b472730fafef3e22180da6d52340f89403a52ea0023a577902b02d152406a"}, @NFTA_DATA_VALUE={0x28, 0x1, "34133b760f36cc5d532b6a8ac2d0bd59339bde7f1dcf88cde57f3691765b0b938005287d"}, @NFTA_DATA_VALUE={0x66, 0x1, "73b17a21bf7851a6d33e766c5ef28d91cdc2a06a77f37b6c5885d228bc4ef064787aacf49061eceebc91b9a191bed2d4a2c53aaf431000e81cf830ad7465e6e2bfab403b4da933769a71033c1f280b517f9b2e5f9b6e29413dea5ae5854ea9ca319f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x705754bc}]}}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xffff8ce5}]}}}]}]}, {0x288, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "2caff7714b1f71d7637d721d2b006ce3105cbf9b0eb4e9124a52c6358aed611d21022db762c8"}, @NFTA_DATA_VALUE={0xeb, 0x1, "05ae77e8c48857ffb69cf9af373d149ffd44f13ef72d9729599b1f64e7c569a2db91f9a1917946fe4351a2da87f24132845d69ba001ecb391238c07da3daa66c85e924a98c7d4f626328c67d38418c6501a9a26a014e4db786821ddeef1fed6a8e02efc34f7a31e0a16d69d043f2cf8cd473edefeadb8e2c41f490cebc49973663cc3bf17da334a837f2b350a5d9eb59068a6d3fda1629c3f2f05fbfa368a148bb366e372c933ae91701d520f71a23d99254792057be3e9f8dc7993c6db2d96c03160a349d546817e7e0acb225db20beb9b3f8a2d1e620ec015bfde55342ab19f6215d51f87199"}, @NFTA_DATA_VALUE={0x7c, 0x1, "7e7e502504644e11fd750d1f042fb6c2e8800341d21492181ff60fd9e2a3c23289ef8a28400062e9e82dce90e29ecb0277a8fa14176f15632c41d3a068d2ebc23af0d32d9e61b6fbc415257e61212aa86c7277c3fab9744e8024f3b72d75d1cef43c191eff0ae321dd2322a1da942570c5d35927a114195e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "889ab01ace1a3b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x78, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb9}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb0, 0x1, "3e143596edd1474acfbac9224fca24d6e3e4ef46deda0fb140064d9405ea137ef6e0b9661405162c14979feb56fbbbdee9cb2bc504fbb7c1d4d7310d6db8dc527f6785642296371df2841a37852d127bdf7680ae2bdb73472bd00bab5079d458f49f428468c57335f12a2f37b338e5e37ce2ea1112e12cef17b547ed74ff779cf3837fd8e8ab407066e68e139d6687f9e295d1bbcefe70d700d03a4203f83478611127e28f261a430041ada8"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x91, 0x1, "420b7e79e80d2e433788c9477c134880cd906aaffe5994d74b0e92b90d5f3fde025f480b45882f18a374bedb0359b6be3a1bf32db04be96e71290cb4598b06292ce85f3dcd28b0fe6811a2f83894a558a589619bfccb575649d6a54ead8e621579e808882c15b4192249d937ed827ab452573255eb3359a65c6b47ee942372bb359230686ada33dd3b0ba09230"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}]}, {0x10b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x10a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "fcbe"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "1307dfffb759aac3f4977633c480b69eec25c74308c91fa3fba6992ad35e1da98caab5327ffc930eb1a18a9eb45c305748f909f34623a711492762e8f73ae2a84625e88951b8888c893de25c3b264b4fed456349ba91"}]}]}, {0x1d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x2a, 0x6, 0x1, 0x0, "2b53be246d0ca69b3e1b227fc7b9cbb09ea1555e771fa8bbf06119ac0d439b6adb3b8b767db5"}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x158, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x138, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x128, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x31, 0x3, "4c674da2dfd61aee237fa691e9f3b07f0a4884b0c90a41109d568f7d950df55bfd85fda9908ffe11e66f11fa91"}, @NFTA_TARGET_INFO={0xe8, 0x3, "4ba9dad61f7b7c11f0be948f6c979797cf3ad9433f294325cbbf16f35ce9c4e485ea28e4a6c5a08e380cd2df4f705f12f264f9322f40e220003967922407e6f095d46385a64a0aef4d47fd9af948af5a0654553d402e2f4e5ad9b7243e8ad15d0872579fbbc1811e79dc4e0cafa8d138f3ba09fbb82e5c911db02aa909238724b27c784b70643f6ac28d615fc1edbb5980af22bf1075541d0a23beb398afe5dc927962c46fa682eee01d7c3c917875d93cc90a7b1d52e1801a3756931c7889b74001519e062bb4847f95e16d9c2a2207531f2a8b5d590830bc3f165e6ff7db3a93d371f4"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x280, 0x3, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6a817df8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6bdd4d0f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2836e6c2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ef12ea6}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x657b6072}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffc01}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfc4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_USERDATA={0xe1, 0xc, "56b82b3cf1f5edff25c83c70962235cdbf0a81d70282636cac1ea3c2086ced09df9f20d411a14d8e5682c718f0db7495ee5a9977e227bf04b5edc7768304de75b1f1b988dfa82eb308a403a610328f82c59ea2f64fb1fc485c69331fb6e02d3c13b3227c0c931938ad544a76ccc5ee06e9ac2cf2eb842ca4b45d16b4bca3297849915c2800927df0eab8dad71ea1e5d9f1ab4fdf9c93e3a384d2f9fd6057596a4f88c401b325593e05e9c79a6fa85ed8ca8b22532e3e7f9ced19879d94bd5e4d0aa858078e359430e2f467a896e6507dfa91fad3401cc2040aaa8d4d63"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2f2d47}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20d18673}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}]}]}, @NFT_MSG_NEWRULE={0x22c, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x6c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xed}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x53}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x110, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x3418}, 0x1, 0x0, 0x0, 0x41}, 0x8000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x8, 0x7, 0xfdc6, 0x2, 0xf, 0x8, 0x4f}, 0xc) 1.026824803s ago: executing program 1 (id=10338): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071117b000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x15, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd0d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1, 0x3, 0x0, 0x6, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x4, &(0x7f00000001c0)=""/4, 0x40f00, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x3, 0x5, 0x7f}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x2, 0x3, 0xe}, {0x0, 0x4, 0xf, 0xb}, {0x0, 0x1, 0xd}], 0x10, 0xc04}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x40, 0x10, 0x3, 0x7ff, {{0x13, 0x4, 0x1, 0x7, 0x4c, 0x67, 0x0, 0x8, 0x29, 0x0, @remote, @empty, {[@noop, @timestamp_addr={0x44, 0xc, 0x85, 0x1, 0x3, [{@broadcast}]}, @timestamp={0x44, 0x14, 0xaf, 0x0, 0xc, [0x52f2cda6, 0x0, 0x383, 0x800]}, @ssrr={0x89, 0xb, 0x65, [@local, @broadcast]}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0x6, [0x3, 0x9]}]}}}}}) r3 = getpid() ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={'ip6erspan0\x00', {0x2, 0x4e22, @broadcast}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) r5 = getpid() sendmsg$unix(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r2, 0x25, 0x2b, @val=@iter={&(0x7f0000000480)=@task={r3, r5, r6}, 0x10}}, 0x20) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x40, 0x42, @multicast}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000561d0800034000000007440000000c0a01020000000000000000010000040000000073797a3200000000180003801400008004000180080003400000000104000b800900010073797a3000000000140000001000010000000000000000000000000a"], 0xd0}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0x400, 0x4) 1.025898516s ago: executing program 4 (id=10339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000200"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000600"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x20, 0x700, 0xd, 0x8, {{0x7, 0x4, 0x3, 0x0, 0x1c, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r9], 0x1c}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800091437a2f200000000009500000000000000000000400000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x4, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) 946.475563ms ago: executing program 0 (id=10340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x100}, {@in=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}]}, 0x154}}, 0x0) 910.964427ms ago: executing program 3 (id=10341): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000240)=0xffffffff, 0x4) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r5) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16=r0, @ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 842.88682ms ago: executing program 1 (id=10342): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x80, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3b90, 0x4) sendto$inet6(r0, &(0x7f0000000b80)='f', 0x1, 0x4040801, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x2, 0x10) 841.395475ms ago: executing program 2 (id=10343): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x4, 0x5, 0x56, 0x0, 0x8000000000000001, 0x7fff, 0x400, 0x5, 0xfffffffffffff243, 0x8, 0x2, 0x0, 0x0, 0x8, 0x2]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0xffff8000}, &(0x7f0000000600)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="4d095030dec8a60d63acaa323aed4bbf3b868e09dec974fec563d7165f6b2b5cf26ea3356e18ed379a8064001cea7cd07253909bbd42eb0d1dddc65db2d4ff25561208f626e8eecc743be55036a125653f7e59e2f7d9a5fb049029a9a26c4972cd0a4677474ac56b4e550740371525a6508e9126f25efe32e523fe0d6ad332da2a01719f", 0x84}, {&(0x7f0000000100)="73e3ff2017fec103a80f2367e7330193ab9643c7e5a179697e19ba03ee38661ec614790ac654afc02c8918cdd102262ff77fcbd92d5fac8640c5a3a930d1424aacedc62d3f0cbeb80ae7d5a0e9070f4f94b1741d33eaead6d3c0f5f9047cb557280a57e0c120e679ab7d253b7a370678bd66ff92b82d35797aad88cde78267b9909b29fa3041d114104b9bdc8dc4542058505d0969f9bc5062f61ef5ab016ba2b0e19840a13a8d", 0xa7}, {&(0x7f00000001c0)="f8fbcb1c8cdf531749de4748f45b23474d6d6963aa03df33eb9477363f05d84457d94220e330024182f2c3e6d462875aa0c2e04c0e995e95681230810cfc8759bdc84828af6aec070c2eb2af3335c98163197d0f5fc170eb4314bd36ec513212f98ce71371df2a7ca4c448d8495671a65d8e6f831187dcdb37af486b0ad3641fe4396867a9ec5b4d7b83428da3997751342ff13e5def41fa73083fadf964ab69989628ab949a4303397203ab67eaa7076b8b6e2691aebd63b701997d6cfd8fd25fddc1ae8a39187bf117e0e0fecf4ceb35093f4ca1fe500737e5", 0xda}], 0x3, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x2, 0xb2, 0x2, r0}}], 0x20, 0x4000}, {&(0x7f0000000480)=@in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000004c0)="8549290d8c6c05e152b5b57da16f665c80b32c143ab055bcbb57b249ea05e35a214f3c8fd564f8807213e0d48eadda38113653087d42245070c5ae0ffaca6e", 0x3f}, {&(0x7f0000000500)="b93d45002b9da213e7ea164ad54e1627cc504d9285b76b90a02a5865b9070b667b987d1be06544457f1c8b147455b5382211e927ca5db861e63e0bbe6942eeb5d9e00598de367714dffd310c2944de75bdcaf62c17e466b763dabfc0c090cf87b5ce2ffd02d819a456d863ee483063", 0x6f}], 0x2, &(0x7f0000000640)=[@dstaddrv6={0x20, 0x84, 0x8, @private1}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0xfff, 0x820a, 0x7f, 0x100, 0x6, 0xdc7b, 0x2, r1}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x58, 0xff}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}], 0x110}], 0x2, 0x20000818) r2 = socket$inet_sctp(0x2, 0x805b197fd4ecb0e7, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000800)={r1, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x9}, 0x90) r3 = socket$inet(0x2, 0x800, 0x8) r4 = socket(0x15, 0x6, 0xf4) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000008c0)={{0x2c, @multicast1, 0x4e20, 0x0, 'lblcr\x00', 0x1, 0x4, 0x23}, {@multicast2, 0x4e20, 0x10000, 0x100, 0xf83, 0x1}}, 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000940)={'ip6erspan0\x00', 0x1000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000980)={0x1, [0x0]}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000a00)={r5, 0x7b95}, &(0x7f0000000a40)=0x8) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000bc0)=0xe8) ioctl$TUNSETOWNER(r6, 0x400454cc, r8) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000c00)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r7, 0x99f63000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r7) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x180, r10, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x13c, 0x22, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x60c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x428761f1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xae}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcdaf}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x885}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000000ec0)=[@in6={0xa, 0x4e24, 0x51e584fa, @empty, 0x8}, @in6={0xa, 0x4e21, 0x40000000, @local, 0x9}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x29c}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x9c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff6f8d}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0x9, @private1}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @multicast1}], 0xdc) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r12) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001000)={'wlan0\x00'}) accept$packet(r4, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001080)=0x14) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x88d0) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001280)={0x9, &(0x7f0000001200)=[{0xc, 0x4, 0xa, 0x7aa}, {0x0, 0x3f, 0xe, 0x4}, {0xc739, 0x3, 0x7, 0x3}, {0x5, 0x3, 0x6, 0xffff1a7e}, {0x1ff, 0x72, 0x7, 0xffffffff}, {0x8, 0x5, 0xd1, 0x8}, {0x0, 0x8, 0x2, 0x9e}, {0x7, 0x3, 0x2, 0x10001}, {0x7, 0x81, 0x9}]}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000001500)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001300)={0x1a0, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_NAT_DST={0x100, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x10, 0xc, 0x46, 0x9, 0x636b90f1, 0x0]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK={0x8}]}, 0x1a0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'batadv_slave_0\x00'}) 758.441158ms ago: executing program 1 (id=10344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3c}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x18) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000018c0)={@val={0x60, 0x800}, @void, @ipv6=@gre_packet={0x0, 0x6, "997f34", 0x1512, 0x2f, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x6, 0xc, 0x1, 0x9, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3c, 0x24, '\x00', [@generic={0xfb, 0xf8, "4806db0ab8f2432e00470475c52438c8ad35f15d4949eef1c5943aeeab6b2e14d421975a4508b6cc05e3c8c0884c7ad28710d7924e0b0c0004f3271c639332191aeecdd27b106d059238c3446630c8ba7c47414a8d90bbab79c4cabba6d8cd2153463402dcd03a9a1805226c25e95584c351e5ce818882114b5d8726858f8d168c211fd768c1239c1dbf3134b8c0b46c1109b982bfe3a6fb32095ef539a770b4a56c2f096473e298b5330e0835f75e099d9cd0e6fa334ae47d722532871050ecd3a886cac1837a58717dc77fed85514649e32dad76ab372c60af871a1280c9d9a7aed5fab77cfb4b2129fc04022f7815f1a24add2d19603a"}, @hao={0xc9, 0x0, @loopback}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x1, [0x3, 0x6]}}]}, @dstopts={0xff, 0xb, '\x00', [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x84b}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0xe1}]}, @dstopts={0x33, 0xf, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1, @calipso={0x7, 0x58, {0x0, 0x14, 0x10, 0x89, [0xfffffffffffffffd, 0x101, 0x9, 0xc, 0x7, 0x80000001, 0x9, 0x7, 0x0, 0x8]}}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xea8}, @jumbo={0xc2, 0x4, 0xe}]}, @routing={0x84, 0x2, 0x2, 0x2, 0x0, [@remote]}, @dstopts={0x87, 0x9, '\x00', [@hao={0xc9, 0xfffffffffffffe0a, @remote}, @calipso={0x7, 0x28, {0x2, 0x8, 0xd, 0x3, [0x1, 0xfff, 0x6, 0x17d]}}, @hao={0xc9, 0x10, @loopback}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x6, 0x40, 0xb1, [@mcast1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd3, 0x2, [0xf1, 0xff], "e5bd2c7fb65014a9f326808599ab69b989b8ffe4c1897e85d0f0ab5002e00a3bf4ef17b0fd1f91b7622cbcfc540c8fdcf668d2a9c77eb8d8b53bdbcf16f0420d8fd9042a3f86c6bd56e6b286121ec137d6720582fbc569dc41e49ad904b97b3b3fb50edb12fdda05ab320025b157a27fc0f8a713d69b149fd83d1ec07068ae88d20f52ec42897e7e9e5eb22d247779590c5dfffb2831c6eccf4f30ab0adb4843e1df2f865574d957cc75212dd04ff971cf0130fa87124e9e476a8e39c4aefcbb40420d45b05104ee78f0db3f1388c9ab57008f"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5, 0x19], "dfab324ac267"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x4, 0x10, 0xfff], "8a542b53e13420c57c395392a79297843602cb3bcc7afee40c6b6c04085348fcbed1c367c92bc4aff3a4db8dc0ddf5e7017e584a787597ed7c327e27874c6991a1c96024266c4c73facfe6968cf0093c3301bea07c920e6f594f417e31bb6d7c61aefcfa00ef438e476fd35d7d3ea391dde3462b510c36989393b448fda747ed21022429cd799528b396e123d307ba29bc95e3bfaf389aafce3de9d095061516558bec42b00fc7c277465bc7f47dd9df80bc03e6cfcbe9eddaf41296c8f1b3dff59c14dc8f7405645df1d5e1800cbd8f3e16b9534703f56a8e464d7c11b456da9b0c70015d531527b28ce2687842857a1d511bbb90bc12ab74e19effbadf014ad2589d36f8cef7b79532d78c9b9c348765c59a7a56683293c29b71c140fdb37fd6ce12626dca24b2b84d8f37ef572d420643392d3b568e9acf8f83ae9afa34ed4f4945dea342976ad3395ffdddd8611285c84ae5bed2d605fcb3cecb58166f8f0d23ad0fa35c9c49634966f27c504d25df8e6bf84f0d7e2084b0427d25fbf67b4619be1541414f44286d98de87836d054307b5ab3bec3bccfe259b631e9871976aa130bcc368b3d6ef834bc5e292e11ac1888b11f408b1468370ee6f9e909279b8bddac357377971bfe947fed9516f317e534f410106ee5f71bbf1d009b2d2aa5f8e47655d224b384c6d75d3d2858dada6112e9ed2ad4d86f6b3bcddf08b9123c287e055803eb9ceebb7efe4af0be4f0c3c233dc498197a20e95c268ebec47c60d73fc11d2b7e469ad2f6d4e9c1e5d38da0cffd82caed1045eea97519fab8c036f5aac1f093515797f4017362a2d004e6832eb7ee2c38ba6c30a3dd460c2d6eb67b01b2c1ade97533f4f45755eef9aa592d85f7989a141a9b5d04e6f45c44c0bf6a2f5352413bc72c45f3e025a1be3f7fa9e64378bd82fcb77a6941f2bf0150fcea32bdc18875f359ce5bc285428d5a4992942ac4fd1d80d2530027c81500e42c9be838c013796f9b556ce6bad41226f5cffe82cd08ed00d04733144a6213e9034a37c1cbb962ea1f552dec4d8c4db8f40424df69df8d11a75363e0bdae79ce3399354dfad9970c4cd527bb15ac96b11e0c56eaf20692b93c3fe4eb7d662ebd98dd79fc2514fe6f593e4764274a87c85ddc6c64315c82172affaac7f02f2f8f9444b0d5d2c42d58391405310942425a9558a163cdb1ce08a5b1e3fd1152b77d2a60569e34cda7a21d89b96d97094493bb1012a71944c725aeeb0118572116e7174a43bcd44ae54faf645083ec77306524e2fcf308bb2ad8c01470ed8fd8f0832413f7d077a22430205d6a472f88c039ad81889e9aeef8c5be86ab0143fc4b7e2c84638e509ec1b3c568c227eccce75edd135b7d29980571aaaf8d3f367a4bd68881b15296e1fd2f87a9d51b8c714268298ea4fb708f6632dc791b6fd5d495c463170ff105f51cec09ec1fb209dbb025e6bc5a448e75fe0f334bbc11a41ec4323ceba88c5e69adbea7c0afd27094693692cdd19a0c93faf57b084b480f54753db14242c246561016ee025ce7e0490a09f0a72e9df0a79c9cb374e1e439b2548e73135e0977b94eacc414a03eeddfa1c3a95dae2b365e47c88b69b0382c5b75b56afad13fd2978b51f8a5cffada3d049497d747d677b16b3b2e48e96a7e9537675adfb4ed966a12c2dcc197d3805fddd70652dbe60ca06c9060d42aa0434ce786a4af345a3c84643ccab2ddf0e03da6a49bb28c0c2874b95d00ca5fc684218da6b90c66adbe555f21b7ae8fa2e0e4a9cb707ed52a0029deb499f0fbd7da9dd24f426c3c7673e682bff1283ba0b2533eef570731d4fe2385ef4f1a03e7c70abfecb1cee51a67f7d58964a02276f5c635c9f22b7e75853b6a8e05eae4ea34848d7c80da8f9d537f7e1a5a98f498d45d1d7931d611bc91c377c77a41e30a865a173d9325e5197797a3e961eb3ff790d073628ac9fe40101a628adca8f02da51c8d3a912349d33034bda106d2ddd782a423d381d75f129c54aeb651a36db01a09bca8d948ad1aaaa509a44f3389e2acc0efdcc00c4382af6462b884c0cea93647dd08376cf110b3a4527a2a1a41c1b997d0a296c7565d9f03aa1317cbcb2521f724bdeeef6f50570db458c1514e3c3db486b299b60f7f68e93e2f46288c1f8bd177ddef784f4ccc345a0f0204381b509ad77fc0dafad7657cbc3146ac298f9cfdd16b63ba959273bfd74b580141e0a4be599cf00d4c0ea26d698038e1ef68f1419cce5ba38e0557826af237db06616b76ecb6fb35c6002cb9b25a836608ca7d6a11708041d727b1beaf81a399f3fcd6467ffdf9ed7a638f7596e7352e0cd4165502a04e33565cb9bdc91a4b8c7b60c20e43200862bd56673b2a28b9421add2c07e1d525d4a99578bc7b9cc8be9b4e092403ad5007e6adb24741cd192117c3a5014f62f02e05bb3bee0126dd34ffbc88e81b8655e588276f0b7cedd3da526e2d3f4d4b9d77f728e51a55a2b8e7b69562369bbc9526c5e701b248d2a1aacbccc1751be1924e9395d98bbc0ae0de0c1c7f69a87e30bb5e5bfd28c4bad33ca48b5838118c2ef525376bc9a976e4149d19bd33927d1defb6be073d1ce815a7d7c6123255129966bafa64018f212eb894c05d9b0d1d4d20dd8e3f263704e323a2d10f3db63f1337ac49f6af79b372cf06bb2dac596887c226c55b479dfeabb771caf7962331ccdf07d26b650efb8767a5029a5c2f04dbbca8eb88244bcef52076aff55f8ad40a980000c5e54574c1bdeaff3a398113bb37913b58f073e5debbb921a81051a6d335216e356620b3a84928a8941863da3cee6e15d59e68edcfcd62a4c91612aca99fb8b85c1cac73b0a1a1e5124102df22fc9a937d93d0b7561697d0af1edf64f53241708c0b5688162b9d788db151ebfde5c142fa3c3430dbbf7742544c61efeb21cc11f04f92eed514fe5e1328dab8437552b43b05dcc142af49cf10e1e1816c8d401dcbcb95de3953d4057a98f4eec898d613d39230c559bac81091c578ec858c6d99b2892539092b3ef36bd6bd770a0e0f01b6a2e0b05fac4e93b8ff07cd231d54aa752282f5fffd9816795123234f08edba3fd4e537ed66c09644371a7ab859c1f07df3167399fb91d226e2067609c0983cca783fd8eaca7858594bba1165826f52fa0872277fc2a89f68181e5b944da8b0d3cc4d65d1b52d3f0da6c8a20d934b27d39eb8b46a4b3e24b31c462b1f66e61fe3764565c5db8eddfcf41628b3cc82034fe9209965e1649104a2cc2f7cebe003b7ddd87fb93dff4279cd14420a03a10d210b630175cb6c002a6fc2b7c563492b1d6d2d76b937731b9d607478204a9e37de90b885a90944abf5ac9e76a8326441c004ae37890510a57a968a973d6c3ebfaf8fad219355c7377a4a43a9a7e3e85ac287440875ada6973b8d52ec7c3f456acb5029c4d4fcc60bd74b7c25bce9cb5bd7921a98add7b3aa58ce73cc89fa0341cbcef603e072272e314144579b85e7f126a4f809a74cdca11fed1119bda60a8eec443bb297e185a5f4b2b431d39c47ba9a97f72ddee19da0359b59eb2a9c201415d2c7d4cd86b7c78b2cbba46eb67ed35c2f5dbde4e0fb23743de040b32f67bc0538fb0713a0cab9178e17d1604507eaf3c3deff552f130cb16659af649e4a1569e88170c8d1e6836adda75130782976ab99f932ded87025164d1c7c578e2ba547c9e0de186b2c955ca04f9764bade1bcbbf481eac40e9e3cad51183b8f9a2f05d169cb463267dae66cc82787d0eaf38fbd3c078d11aa82b83dc2a2edb63f5e89a6566191d640bc9c01635a651cee37070a8117c741ebbd6edb8ccd8a2fcf787176d6053fc81dd3e435dbd4c55601de6e3fc944fbeb882c8e3ba3dc9e3f92faa7a5bedf124e6303877dd642b27bcb7b131cd048b5ed6853e950c7fd74f3836cced2d8df71b7708070158be98f418465fe90b0aa54b9e2cfbfea597640e20b6ecc662a2f7a986c322158ab3fa014b6c32343501d5d18c092404d19f8d53dfa7f1e375eb5ec20dbe7b24dfb1eded1d4f1de1b75e6335e610e43a238fb4e47b9ffd05545e637e0d0d23315c683bd34dae1f2b8d2fa6a9a749298972d8f353f6ce2e04fc58be0000e1ee9687049e6f98fd6ace258655e25268f76b7b1e8c7c1e0bd0345ee536443d2ac28b4683ff92249f1345c7dc2f50907f993a348e65e0f006c211393dca85c8bab1837c3f750b174eb79bb5a4f9591d2757d4dde4eaa8941fbd66811e379585fffd032763d5bddc53e221be5453aedb7d6bc5dab9d05a6d2783116b91d97824e25c8a01322cb11a841e5f07c63bcedf2160d575253882f75a022edf0efb1762bc5e4d330d32e9e621dd91be7c4a348627d30f269461a01bda48766fe799c767220dd6b9137319ab9a4289eaa3ca405fade4067ebadc7a0d2164e0b99c1be9edadac10f5d7ee6b534eec2c6302334479308151119d2b6b3af9a34816943347646060a7a14449486bd1b1e1d3ebaddd131d9344e036792cb9be67534fa64f27c8e5c3c512dc4ef49584a77a2d81b41eb452310fa7b2eb8dbdc9e6dd2695f49a7d25dc4979cbe310cf0bc2716947ea0b6fac7596950ff86ebe07abde287a181fd6bb9e14674651f957cd1b9136f9ef423da173d93d563f39b3b4fe4797d771c7aa954d71fb711baf4deda82b32d815f833fbc01556e9d529a8a1ab8bcf5bb2bd9c1d64be92c18a98a0de3dfeb31ecda3aa3ba0187b0cf13c0990ac398faf913074ceafb06341cc1e57dd0c158afb46704ca5c70a568062ab4078876017d1bf314866bf4cc507aee4b06d0a6feb5ed7aa06e99c51b859d61f1240055ecf6abbca079b460c051bae66c77d3dd859ec75cf50986542372ea818f05dc537cd32adab9b9e3272f6de13867bc7902ea1a2ec3548bd2ff754c7b0ba94929a0bc8810fc11bd7939d77e386292bdce5640cdd4f9be396bf5f127d2fe9deed00ceda1747faed5e430c9b237f916c28d5d1648e5c7a78ce271922e3c26ff537f17a767d3e1c7d003cba5d3cf853d8c70ab623c728124743df720061620ba60ffee168fd5ddea2f58f4c54cbf4fc68603d6120b8b4cfe4f3f242938d6a1eb85e44cf0ceab44393973ed77c40cacd8ffbb25a8dd34e7cbde0847a7a43ac3945daee67b754736b52a92fd84c73317d2f6ec78f2643a09e52b93c3461fd9aa64ec28be97ed6764a666536df5eeb43cc40ffe1c3db09af31e1ea9a7ca066bbba410ff3adcfe3a3dcf15e6f1e55aa3853a332e7bfdb87730d597f94b13dd34820b7e0b859babd9cd9d2e4ce25cf3323140980cefd1e0bd578f19d38b53a934ec122df250c083024b3fc544e50935bb58bbb90cee4aa77f46b08809333430450294fc37c2577b3a625604c9339e571e867f4aca22efc3a8bf27ebe1fd47d48bab62dbfa4314c1861a538138d494df3722117788168294308cd8b288c244c4d3aa304043e65db48c88b7b73085998e576c1dbd3ef7bb8ec3cf1f507607c2dbb8a7e728e435a320f9af911fb528ffb85e2ea16fe06114fcd4cb76722ce76b221acea1edaea96dae8f14cbbc767cef5ec963b748cb14ef84c8a1076067da1ec50175d5ced3961637c3a13f0819b0dce6c8503874d257e990663f072c858b59ec85588cc3a92ff819ac8cb6408cc59b8ecc8089dc240a3a8926793b37f46867fa55245640eef8e57c9c5dd0447993dc0e90a064e50b77ee87e0f754c5196857f4b64a5e980d89c2758238ff94af39a01569adbf0eff21dd863e8fed29043e7f1962c7"}, {0x8, 0x88be, 0x2, {{0x9, 0x1, 0x3, 0x0, 0x0, 0x1, 0x4, 0x4}, 0x1, {0x8001}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0xfd, 0x2, 0x1, 0x1, 0x2, 0x2d}, 0x2, {0x7, 0x9, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "9f2a72da7491f37b744b1e8f7f4850c05416a95dade75b4dcc30c71b69992909538d04584e793b9c94332391b74903d3e57538316cb29abcf8a2edcce08ea5ea571c371934545c2ba97f70bb7b7aec449a47ca34b16320e77629c5af0c3bb6ffc2fb79f17d8c130b4239a557d0f9dfc217d498752bca939acdb653dcbe3a0b6132b14ba260dc97bc6869574fd4502b7862b06d494b5a81f2be1234fa0a98a4805fb7bf988e1dd0cd1d363ec4666bf01783ba7e52e6a47ff6d469a5d239deccc61ad25c34a18ac0c4a9084f9875812064f1653cc3d12d9be807f830f59f5ca3"}}}}}, 0x153e) 748.492423ms ago: executing program 4 (id=10345): r0 = socket$netlink(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x37, 0x0, 0x0, @binary="1b"}]}, 0x28}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x37, 0x0, 0x0, @binary="1b"}]}, 0x28}], 0x1}, 0x0) (async) 535.111951ms ago: executing program 4 (id=10346): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno', 0xa) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2d696f2000c8656d6f7279202d637075202d72646d6120"], 0x17) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000400200000001007665746800000000040002800800040060000000"], 0x3c}}, 0x0) 533.163998ms ago: executing program 2 (id=10347): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 525.234184ms ago: executing program 1 (id=10348): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_XDP={0x4}]}, 0x54}}, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x29, 0x0, 0x0) (async) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 445.112992ms ago: executing program 2 (id=10349): unshare(0x22020400) (async, rerun: 64) r0 = socket(0x1d, 0x2, 0x6) (rerun: 64) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x20, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x3, 0x1, 0x2, 0x6, 0x5, 0x6, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xae7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x72}, @exit]}, &(0x7f0000000540)='syzkaller\x00', 0x2, 0x8d, &(0x7f0000000140)=""/141, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x3, r1, 0x8, &(0x7f0000000640)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000680)=[r1, r1, r1], &(0x7f00000006c0), 0x10, 0x3}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2ee2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x401, 0xe9, &(0x7f00000002c0)=""/233, 0x41000, 0xc, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x6, 0x1}, 0x10, 0x2e650, r4, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=[{0x3, 0x2, 0x8, 0x8}], 0x10, 0xd3a6}, 0x94) socket$netlink(0x10, 0x3, 0x12) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) 362.939929ms ago: executing program 4 (id=10350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)="cda402e3437ddc467a32f9e80e895ebb24d36f3514a111f93478f5f13e97be2ce82604325f009d583692624120d467c68fe4efaa4b3431bdd50078f9207c75c5b692046e07fef3c1b08d0bfb5473ec42567ffec502e308e3", 0x58}, {&(0x7f00000010c0)="4a13031ddbcef846a75688647e8908463a3956adcbab86d152fa67e4041982d2f7f2b22fb5c94aad8f1881ab4d1b4b000e8326ca63a1baa945126b5a7f164fecf8a7e1c267ad02e00297caf15d6da5de3a2a8a983ce313d342abee6833fe95be4fbcc1841996319277daa22b3d51d8c0e5113f30b929ad5fab1100fd4537af12add63c8bb34fa5e6be95bef6f4ae6fc2da0c5a7244b17aa8a2a78ab0e99202f5623c134603451aaa1982aea1d8f8f67bb9baf4b7b8540ff9233f044abbd0d91f60af28ef56d47fe5fabbe47a1311b45444c01eed8133faa9", 0xd8}, {&(0x7f00000011c0)="10d4f04e3fecdf85a75752b2752e98d761c960cc145f252224c0a6928e6a27a9a51d22e3d55ca65468fbe2a8170d000000000000df0f3932fc1142bee145d9b8988397edf9020ce788", 0x49}, {&(0x7f0000001240)="f832afd0a06b1fa1fdba9cceb864c68694101561c46554a47a66b4e3b0ee5a0422f6e52e15f88ade048db0a19326e8cd8db709b9b12f5d75498d605210a09a2b07dbe6e4ecb117f8c2925d4aaaac48520c23b7eb3f1e52a65e88f5dc22238127c226a76a11ff4027", 0x68}, {&(0x7f00000012c0)="0c4ec6a24d8edce1f08b4420941601eb6b496f739093710fa93ce448044ca9731df3241d5e49866afd1de4a9884b83b4a94e7bc9648fab0d65c214dbfe0b08aac3ecaa770f30f2526ee706d318c1b2330cd20d52dac7bf756be32be67326c460b0c6dd9cae31ca83cb6b0ee9d30e93299d7bf164a975d1e703ef1f504e1a68eee3c0ce9652dd33898c18182e5a2d1ea7f85ee43746f1", 0x96}, {&(0x7f0000001380)="10ce16fa2f1ad773ae18c234124466e18e756c979b1e3612946ef6cbf59c0e092375f35f9fcedaa126076e59ca25d9ed117ced63291790ce7c611f2f74e3406e383b38a4b083e40e1dbc266c7e0242cbe90634e9f0b4458cff74f6f6e124a463385a6952b5e2aebf3fc3de2b6cd59102e9274f2c20a155", 0x77}], 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) 266.013372ms ago: executing program 4 (id=10351): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000022c0)=@delchain={0x1d14, 0x65, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x2, 0x7}, {0xffe0}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x228, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1b, 0xffe0}}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80}]}, @TCA_BASIC_EMATCHES={0x210, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x174, 0x2, 0x0, 0x1, [@TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x401}, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="75656c6eb5f865f1b5", @TCF_META_TYPE_VAR="48ac3ecebe4f", @TCF_META_TYPE_VAR="b4477ea727bd8e60", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="856acd6387"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="217efb42c3"]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="2e33a1", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="fa6a82e4c936"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x48, 0xc0, 0x2}, {0xf180, 0x2, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x8}, {0xfff, 0x2, 0x1, "15b1"}}}, @TCF_EM_META={0xa0, 0x1, 0x0, 0x0, {{0x401, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x80, 0x5}, {0x2, 0x7e}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="fa428d73b5dc", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="d3"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x7f, 0x2}, {0x9, 0xb, 0x2}}}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_VAR="c0221aeeeb", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="16858addbb0a", @TCF_META_TYPE_VAR="99a81c14c34ece", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="9f", @TCF_META_TYPE_VAR="93dca0881114ae", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="7941aeedd865ffbbb170", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="ddec4f8b4b5a08a575"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR=';']}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x3ff}, {0x3, 0x4799, 0x847, 0x7, 0x1, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x1}, {0x200, 0x9, 0x5, 0x514a}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xe3c7, 0x9, 0x81}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x8001, 0x2, 0x4}, {0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x46}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2b}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7}, {0x800, 0x3, 0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x9}, {{0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xf6, 0x1, 0x1000}, {0x200, 0x6, 0x8f, 0x3, 0x1, 0x2, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xe}, {0x4, 0x80000000, 0x50, 0xfffff3dd}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x1ab0, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa75, 0x2, 0x3, 0xd8, 0x166865ad, 0x3, 0x5, 0x5, 0xe1, 0x4, 0x10000, 0x3, 0x2, 0xa755a4b, 0x5, 0x9, 0x4, 0x9, 0x8, 0x6, 0xe00000, 0x5, 0x0, 0x1, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x6, 0x5, 0x3, 0x6, 0x5, 0x1ff, 0x4, 0x4, 0x5, 0x2800, 0x400, 0x2, 0x400, 0x6, 0xa, 0xffffff80, 0x0, 0x5, 0x8, 0x6, 0x100, 0x1, 0xffff0000, 0x2684, 0x9, 0x3, 0x2, 0x7, 0x6be, 0x0, 0x2, 0x3ff, 0x8, 0x7, 0x45, 0x2, 0x0, 0x4, 0x5, 0xfffff8ec, 0x4, 0xfffff801, 0x907, 0xa363, 0x12c, 0x10001, 0x9, 0x6, 0x3, 0x0, 0x7fffffff, 0x4410, 0x81, 0x1, 0x8, 0x7, 0x6, 0x1ff, 0x2, 0x30a, 0x1, 0xe1c, 0xde, 0xb7f, 0xe9d, 0x37, 0x9, 0xe50b, 0x31f, 0x40, 0xf95, 0x9, 0x7, 0x1, 0x6, 0xffff, 0x6, 0x9, 0x4, 0x9, 0x6, 0x6, 0x3, 0x4, 0x6, 0x2, 0x10001, 0x800, 0x9, 0x4869, 0x2, 0x8d2, 0x7, 0x9b, 0x7, 0x9, 0x1ff, 0x5, 0xfffffff7, 0x4, 0x8, 0x80000000, 0x9, 0x6, 0x3, 0x3ff, 0x3, 0x4000, 0x4, 0x8, 0x190, 0xffffffff, 0x2, 0x51f968fe, 0x7, 0x2, 0x40, 0x800, 0xa, 0xffffffff, 0x1, 0x3abc, 0x800, 0x3f, 0x6, 0x7, 0x8, 0x800, 0x8, 0xe, 0xfffffff5, 0x100, 0xeb7, 0x4000000, 0x906, 0x8000, 0x4, 0xffffffff, 0x0, 0x0, 0x4, 0x5, 0xffffff80, 0x9, 0x8, 0x25, 0x77828f91, 0x6, 0x9, 0x80000000, 0x400, 0xe2a, 0xc, 0x8, 0x8, 0x5, 0x10, 0x7b32d277, 0x5175, 0x5, 0x1, 0x8, 0x10, 0xffffffff, 0xfffffffc, 0xfffffff9, 0xbe7, 0x6, 0x2fba, 0x7, 0x8, 0x3, 0x6, 0xee, 0x9, 0x5, 0xac6c, 0x5, 0x6, 0x193, 0x8, 0x2, 0xfff, 0x5, 0x8000, 0x401, 0x7f, 0x1, 0x9, 0x10000, 0x8000, 0x4, 0x1, 0x3, 0x3, 0xb3, 0x800, 0xf98, 0x4, 0x7, 0x5, 0x401, 0xffe00000, 0x10001, 0x3, 0x5, 0xaf, 0x9, 0xeaa, 0xbe4, 0x6, 0x4132, 0x3, 0x210, 0x79, 0x3, 0xfffffffc, 0x7, 0x6, 0x1, 0x9, 0x1, 0xffffff3a, 0x5, 0x7, 0x4, 0xec]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x335, 0x3, 0x800, 0x7, 0x81, 0x0, 0x3, 0x180, 0x8, 0x0, 0x8d33, 0x9, 0xf149bbb, 0x2, 0x6, 0x1, 0x8, 0x7f, 0x6, 0x2, 0x8, 0x2, 0x10, 0x8, 0xffffe754, 0x8b77, 0x3, 0x10001, 0x8, 0x9, 0x6, 0x1, 0xa, 0x7f, 0x6, 0x4, 0x3, 0x3, 0x400, 0x8, 0x5, 0x5, 0x0, 0x6, 0x7ff, 0x1, 0x766a, 0x2, 0x8, 0xa, 0x3, 0x7fffffff, 0x6, 0x2, 0x3c00000, 0x100, 0x2, 0x0, 0x72, 0x699, 0x5, 0x8, 0x8, 0x7, 0xc, 0xfff, 0x7, 0x0, 0x8, 0x7f, 0x9, 0x1, 0x64, 0x318, 0x597b, 0x2, 0x1, 0x4, 0x9, 0x4, 0xf9b, 0x3, 0x2, 0x5, 0x5, 0x3ff, 0x8, 0xffffff7f, 0x8000, 0x3, 0x9e, 0xd8, 0x8, 0x8000, 0x8000, 0x80000000, 0x800, 0xfff, 0x4, 0x7, 0x1, 0x6, 0x74, 0x800, 0x5, 0x6, 0xfffffff8, 0x6, 0x6, 0x0, 0x200, 0x38, 0x2, 0x9b, 0x5, 0xffffffff, 0xd, 0x5, 0x80, 0x4, 0x0, 0x1, 0x0, 0x8, 0xa3c, 0x1, 0x0, 0xfd0, 0x1, 0x0, 0x5, 0x80000001, 0x4, 0x7f, 0x4, 0x4, 0x1000, 0x6, 0x5, 0x6, 0x5, 0x9, 0x0, 0x0, 0xffff, 0x999, 0x1, 0xf, 0x6, 0x8, 0x4, 0x1, 0x3, 0x22, 0x3, 0x8, 0xfffff92c, 0x2, 0x9, 0x1, 0x5e, 0x0, 0x170a, 0x1, 0x9f, 0x8a, 0xee, 0x1, 0xd, 0x4, 0x7f, 0x3d0, 0xe62, 0x8, 0x3, 0x0, 0x3, 0x6, 0x1, 0x101, 0x0, 0x5, 0x36d, 0x8000, 0xfe7, 0x4, 0x5, 0xffffffff, 0x3, 0x0, 0xfff, 0x6, 0x1, 0x4, 0x4, 0x4, 0x9, 0x2a4c, 0x5, 0x80, 0x2, 0x400, 0x7fffffff, 0x8, 0x5, 0xf, 0x4, 0xf6, 0x4, 0xfa, 0x4, 0x809, 0x80000000, 0x5, 0x2, 0xff, 0x4a5a, 0xffffffff, 0x8000000, 0x3, 0x1, 0x8, 0xba0, 0x3, 0x9, 0x3, 0x1, 0x4, 0x6, 0xfffffff8, 0xb, 0x8001, 0x9, 0x8, 0x0, 0x8, 0xeb4, 0x9, 0x7, 0x3, 0x2, 0x0, 0xfffffff9, 0x3, 0x8, 0xffffffff, 0x0, 0x100, 0x2a7c7298, 0x7, 0x2, 0xf5b, 0x1, 0x10, 0x7, 0xa9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x10}}, @TCA_BASIC_EMATCHES={0x688, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x5}, {0x0, 0x5, 0x2, 0x2, 0xe, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x8}, {0x0, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x3ff}, {0x7f, 0x7, 0x2, "fc47283d7ca859"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8b8, 0x7, 0x4}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x401, 0x1, 0x8}, {0xff, 0xffffffff, 0x4, 0x4, 0x9, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x81, 0x2, 0x6}, {0x7a, 0x1, 0x1, 'N'}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x1}, {0xf27, 0x7, 0xa783, 0xb3d8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x401}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xff, 0x8, 0x4}, {0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x7}, {0x40, 0x3, 0x30b4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1800, 0x7, 0x1}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x7f, 0x4, 0x6ec}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x4}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x2}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x30, 0x3, 0x0, 0x0, {{0x1000, 0x0, 0x2}, "c226c0c50e0319d72f4697520af68028b256cc96afc0b277d21cd9b5945332869302"}}, @TCF_EM_META={0x98, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x83}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="eda50316f2f1d0be2e", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="c6952a", @TCF_META_TYPE_VAR="0528404592"]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="f49c", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="d1", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="43dedbc62217", @TCF_META_TYPE_VAR="0f95a3611a01d7", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="adcf716e426c", @TCF_META_TYPE_VAR="5b13", @TCF_META_TYPE_VAR="e57b", @TCF_META_TYPE_VAR="e43c"]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="523010d2672f485fda", @TCF_META_TYPE_VAR="e64c44112914e7", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8536f611e7bc5519d9"]}]}}, @TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0xff01, 0x0, 0x3ff}, "54bd5f9ad5056409cd4746b580115bc87a360b296b7d5546e7d908554b5f79fcd8d2df85765c2388037162"}}, @TCF_EM_IPT={0x40, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_DATA={0x20, 0x5, "32b34f9088f51c8216e83f81631edae12fbbf2766a6c8a6a41ab45e2"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x10, 0x2, 0x3}, {0x1, 0x1, 0x2, "be"}}}, @TCF_EM_CONTAINER={0x40, 0x3, 0x0, 0x0, {{0xe9c2, 0x0, 0x55c}, "6bf08c8a55b3d6a9e0900d1d9158b1932b621c64cead7698d475d14523edf1780a8c63bcfedbc52bb17c050d11ede5c32c261482"}}]}, @TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x2, 0x0, 0x0, {{0x600, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd4, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="6987b09e71b88887", @TCF_META_TYPE_VAR="9123"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="2ddb3151214c", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="34fb8ad84c4dfdb6fa", @TCF_META_TYPE_VAR="b8c2e91306"]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="1fa9a6ad19d14531", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="30bbe1d633"]}]}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0xfe01, 0x0, 0xd6}, "118c6f490897675389946c00a2473c98fafe98e39c44c1c96d9f19f855d52dc499e613db8d3ac07f241fa87bac99a91216e2bf7e7a50bd9c2dd94c105d8901684d2f"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xd, 0x2, 0x8}, {0x0, 0x2, 0x2, 'q.'}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0xfc}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="03479bf7fa3539eb"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xf, 0x1}, {0x8, 0x10, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x968, 0x3, 0x4}, {0x5, 0x8001, 0x8, 0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x15b5}, {0x2, 0x43, 0x2, 0x6}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xb, 0x7, 0xfff}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0xd68}, {0x2, 0x6, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x8}, {0x0, 0x2, 0x0, "b5b4"}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x2}, {0x8, 0x9, 0x2, "d412b659e07b51555a"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x401, 0x3, 0x2}, {0x5, 0x5, 0x6, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x9}, {0x1, 0x4, 0x4}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xe323, 0x2, 0x7f}, {0x2fb, 0x8, 0x2, "f912e6a97493ab67"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x1}, {0x54a, 0x2, 0x41, 0xfff}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8000}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x91}, @TCA_EM_IPT_MATCH_DATA={0x10, 0x5, "05d308ddbba00c33a0d75e69"}]}}, @TCF_EM_IPT={0x12c, 0x2, 0x0, 0x0, {{0xf}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xbb, 0x5, "d5e3349afd7cc157173f93a2e635ef93fc10566bcb10f137f11293036ffbccddcd901990ebac6ab762bb5e924c2ec276b490b8dfd0d5eda6f8d8633d1d2e42d1842ca19dd5abc3e05574ba45be08299590379dd7e5b1c6ee07315583a40ecb047ce3bf3490074ccbb10925d278f3e028541978de9d162e6862e6859f22611704d84ff76a6dc855d800ea33ba61f70bc611cf4caad04d76ee43f6e669b1255fefa64b58599210e9efbda1d6f9e07ae040aeb8e79c530b71"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x16, 0x5, "8728b4244628752696b65d2a23b95698b6c2"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x1ff, 0x2, 0xde}, {0x5c, 0x9, 0x1, "a88ea4c707972896f2"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x94}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_ACT={0x3e0, 0x3, [@m_skbmod={0xf4, 0x1b, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa}]}, {0x77, 0x6, "deb53aa57ab312789c5acfc74d91ed53e928621d1fa48816e5e197bedd23cb52c118f634fdacdc996b98216b7d4d5de43eb2a636195b52fa2960b74ba8d42301a002f154935712d888dcee907d441de1dbfd54bfae42c7d012973f475bbbddb6ba15fc8ea79f592a9b082dc2333292db97bd05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x128, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x14b, 0xffffffff, 0x2, 0x1, 0x1}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0xd6, 0x6, "b0f50ab116d5eb2b058e485a1cafb94e8fcd79d87bba72273932e729e15b59ad94a37156cc70a5c0fb162c91db8c1c12c1abdd096fedd77c5f64d967a48b244bf29fb857660b2151afabd5e197ebbd905616ab7a15316f129ac30a02cd7ea60a9fae75e917019ea08624a8d3294aea060acc2fc8b2d23dff64a489c7ccd3d5f92e6a7cd18148ad194153b0c0cf3816403c35bef669cee42bfbaacbe0332834f101555cb25715ee496779fc8cf78357827487727a887cb5c5292f78525da3e0e077318d2ec09eb53802433abb868198495f9a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x10c, 0x6, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0xc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x179e00}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x99}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffe01}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x9a, 0x6, "942166e78253a4339f6752a2573892588e16390b8ff6d7ed9dcb9007941663019ea5814ee5940f588d2f4a9c62a25c43432c2ba57628756bdd100cd702b75541ee2025fe580c8a82804df8ffd356d2fbcedd54271654b6da4e9bfc1ec912ef000154824a137c1f9f09c6f58a4ebc52245491696df88ecb359f8376b4433d443bde3d905376b6566f65d162d42df94c6468c953c4026a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0xb4, 0x1a, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x5, 0x7fffffff, 0x9}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x4, 0x4dc0571e3f2aa6cb, 0x8, 0x6}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x7fffffff, 0x7, 0x7fff000, 0x318}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0x9, 0x10000000, 0x0, 0x1}, 0x7a}}]}, {0x15, 0x6, "0e1989e60dbe84be7a96a6eaaa451834f2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x6, 0x80, 0x7, 0x7, 0x3, 0x5, 0x9, 0x101, 0x8, 0xfffffffd, 0x4, 0x4d48, 0x2, 0x63, 0xef8c, 0x9, 0xf, 0xfffffffa, 0x4, 0xb, 0xa, 0x0, 0xfffffffa, 0x2, 0x40, 0x8, 0x8000, 0xbb3, 0xb4, 0x53f, 0xed59, 0x0, 0x5, 0x10, 0xffff15e6, 0x5, 0x7, 0xac3b, 0x1ff, 0xd1, 0x9, 0x7, 0x2, 0xd6e, 0x8, 0x5, 0x8, 0x7ff, 0x3, 0x9, 0x9, 0x2ab4, 0x1, 0xfffffff5, 0x8001, 0x3, 0x6, 0x7, 0xfd, 0x9, 0x9, 0xfffff03c, 0xfffffffd, 0x6d7b, 0xe9, 0x0, 0x2, 0xffff0000, 0x5, 0x7ff, 0xa, 0x3b3aec12, 0x3, 0xc0, 0x8, 0x42, 0x6, 0xffff8001, 0x4, 0x9, 0x14000000, 0x8, 0xb7e, 0xffff, 0x6, 0x6, 0x7, 0x7, 0x7fff, 0x3a7, 0x0, 0xffffebb4, 0x7, 0x401, 0x465b, 0x0, 0xe, 0x3, 0x9, 0x9, 0xe4, 0x23e, 0xff, 0x8001, 0x800, 0x48db2782, 0x7, 0x4, 0x7, 0xb8, 0x7, 0x8, 0x8, 0x3, 0x1000, 0x8, 0x0, 0xfffff68d, 0x0, 0x9, 0x39a, 0x9, 0x3, 0x81, 0x8, 0x3, 0x4, 0x9, 0x64, 0x3, 0x1000, 0xe, 0x186, 0x81, 0x879, 0x6, 0x8bf9, 0xfffffff8, 0x1, 0x6, 0x6, 0xffffffff, 0x2, 0x2c, 0xb, 0x5, 0x8, 0x8, 0x800, 0x2, 0x9, 0x1, 0x6, 0x6, 0x0, 0x9, 0x3, 0x7ff, 0xfffffffd, 0x6, 0x1, 0x8, 0x3804000, 0x4, 0x8, 0x1, 0x8, 0x2, 0x0, 0x2, 0x3, 0x14000000, 0x7f, 0x3, 0x60, 0x80000001, 0x9, 0x8, 0x3, 0x40, 0x0, 0x80000001, 0x400, 0x0, 0x4, 0x0, 0x3ff, 0x0, 0x10000, 0x7, 0xcda, 0xb4, 0x66d2, 0x2, 0x171, 0x5, 0x0, 0x800, 0x4, 0x1, 0x8, 0x7f, 0x6, 0x8f, 0xf85, 0x400, 0x200, 0x1, 0x2, 0x4, 0x7f1, 0x9, 0x97, 0x0, 0x1, 0xa, 0x7, 0x5, 0xb, 0xc1a, 0x1, 0x8, 0xfffffffd, 0x2, 0x9, 0x7, 0x2, 0x4, 0x9, 0x4, 0x1, 0xc, 0x5, 0x6d, 0x8001, 0xfe3, 0x2, 0x80000001, 0x8, 0x3, 0x7fff, 0x4, 0xc52, 0xfff, 0x8, 0x7, 0x1, 0x2, 0x5, 0x8001, 0x7ff, 0xffffffff, 0xff, 0xfffffffd]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_BASIC_EMATCHES={0x3b4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0xffff}, {0x1, 0xffffff46, 0x5, 0x6, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x58, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x7}, "75f1b304a53e3ec36f34598c6be4e4b5e7fd44a4ef52a8e32c3f44bbf6249825eba605d4bc9ee0bbad27f40f94fa5665ae9c52e59f177a7a3489023c8ef2129c597a88eb7e8572efde26f7"}}, @TCF_EM_IPT={0xc8, 0x1, 0x0, 0x0, {{0x400, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x79, 0x5, "2cd3a91ec03a49ed6e48c5530b216ff597b441b9f221eac491c1a6e43df84cc73740a93a34409b2cefc25990ee76f6d4930757c0548344dc3af2df7d4e8fec415992c7cde8b9f55f2c37ae55d89d38b21e8426b914b6a53201166129fe6453f4888da7825f0a3e625f6a1e10d7526495f9c886ee12"}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x8}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x9}, {0x1, 0xd36f, 0x3a4, 0x2, 0x7, 0x1, 0x1}}}, @TCF_EM_META={0x98, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR='6', @TCF_META_TYPE_VAR="b589d7199b", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3556081a40606c", @TCF_META_TYPE_VAR="15c0d42263", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e7b3058835", @TCF_META_TYPE_VAR="bb50e109565c", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="9d61796c49bb68c8d1ff"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x984}, {0x3, 0x7fffffff, 0x8, 0x7}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x8}, {0x3, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_META={0xe4, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="1114f373635273", @TCF_META_TYPE_VAR="1442af34fe6b37e05f6e"]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="868e", @TCF_META_TYPE_VAR="b41efd", @TCF_META_TYPE_VAR="dee2b700293fe428a947", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x36, 0x3, [@TCF_META_TYPE_VAR="f3320f8a1d5386acf251", @TCF_META_TYPE_VAR="3b7dde241167", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="42d17734a0e4b293", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9d1a6e63d3653fcf7f25"]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="e378cf36e124", @TCF_META_TYPE_VAR="58ec"]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="ac6a76a84d41", @TCF_META_TYPE_VAR="bee4", @TCF_META_TYPE_VAR="cbaa71a02a81776ee9", @TCF_META_TYPE_VAR="a6cb3d3c4438fbea"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x9, 0x2}, {0xb, 0x5}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="a97014"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="5e781209f2e4ac80"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8b8, 0x3, 0x4}, {0x8, 0x9, 0x515b, 0x7}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x242, 0x3, 0x1}, {0x6, 0x7, 0x8, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x82, 0x1}, {0x8656, 0x3, 0x1}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2}, {0x2, 0x3, 0x0, "27378a"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x2}, {0x3, 0x5, 0x0, 0x7}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xdc}, {0x2, 0xa, 0x2, "3c7105db83fba4c475b2"}}}]}]}]}}]}, 0x1d14}, 0x1, 0x0, 0x0, 0x84}, 0x40000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}}, 0x20000000) 217.943741ms ago: executing program 0 (id=10352): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x6, "269042f6"}]}}}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x136, [0x200000000340, 0x0, 0x0, 0x200000000416, 0x200000000446], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x1ae) sendto(r1, &(0x7f0000000740)="120000001200", 0x6, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200", 0x6, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000340)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) (async) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000340)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@delsa={0x1e4, 0x11, 0x400, 0x70bd28, 0x25dfdbfc, {@in=@remote, 0x4d6, 0x2, 0x2b}, [@algo_comp={0x81, 0x3, {{'deflate\x00'}, 0x1c8, "62b2d10025dfb9555d84c695a9ee0df4b284a7f0746c6d8c69cb646eae6af8870aa202006484676a5e7b7c198f6afbb5adcf2787d24078f339"}}, @mark={0xc, 0x15, {0x35075c}}, @algo_aead={0x60, 0x12, {{'aegis256\x00'}, 0xa0, 0x100, "cfaec0d883428d236748b5fe242434744711d32f"}}, @etimer_thresh={0x8, 0xc, 0x4}, @algo_aead={0xc3, 0x12, {{'ccm(xeta-generic)\x00'}, 0x3b8, 0x60, "a4e7a4e67f362b5733380b9fbdd16dccdfcd411854a1a93b9302e4fdfd5bd76d668a6cd284df75cb88f6c0b056ae8a31d5bdf3fc85c3aff340265e849bb05b1404d420a09413e1b30bdad8f33ceef98c20663f91e2271117318b9793125ee1ead2354bf4885dc441a0e489f1bdad922a846a86701ca4b0"}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004001}, 0x80) 86.686205ms ago: executing program 0 (id=10353): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r4}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000001140)=0x9, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000001280)={0x7c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002e00)={'vxcan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000080300004802c0001800b0001006e756d67656e00001c0002800800024000000000080003400000000108000140000000000900010073797a30000000000900020073797a320000000005000740c9000000140000001100050000000000000000000000000a"], 0x8c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063016e00000000009504000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x70, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x41}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x169}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xb}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c040}, 0x80) 83.7061ms ago: executing program 1 (id=10354): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0xc, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000040), 0x0}, 0x20) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r5, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffe, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) 83.08805ms ago: executing program 2 (id=10355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x5, 0x142, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000c00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf252d0000000000000600060000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000009000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000c000018510000090000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x5, 0x0, 0x2, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180)=[{0x3, 0x2, 0xb, 0x1}, {0x5, 0x3, 0x3, 0x6}, {0x5, 0x4, 0x7, 0x3}, {0x3, 0x4, 0x10, 0x4}, {0x2, 0x2, 0x3, 0xb}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x200ec, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000140), &(0x7f0000000640), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="18672bb4b2e4eb0c000c0072140851c3dd3dc199dd500000012abdde1741a2200e199bf10b320cdee19a84feba59e528e4eed33cb92f5088cc5bc49a94bf3f", @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$caif_seqpacket(0x25, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x11c, 0x4, 0x0, &(0x7f0000000380)) sendmsg$tipc(r8, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x800) read(r7, &(0x7f0000000300)=""/93, 0x5d) r10 = socket$inet6_udp(0xa, 0x2, 0x0) writev(r10, &(0x7f0000000b00)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000880)="a4f8420faecf1fa960bb5651b41454a0810e472d48879ee5853b7f56616cdbfe769b0ef38b2207411f845e50361c122b3bff0543d2b772b8786df167c7673be9ac6d0d53f3f0fd9c2cc883f72e02d7faf5ac8093af65fcf40d5ff01f9826113b1da7b242", 0x64}, {&(0x7f00000009c0)="2de8902ac074dc943a625cc1450f6c889c1abc4165bb26c97538fc0c511ab7573571aa42de896733f70d4b76872da1f75f2b0e2a8463d55df2dcf6f0a1bb903296881998cf12455bf79519f5667525a3df67023c7b61bfec52b63277ed18c6d8b4536e626f1dbfe8582edd221543adf7c12547a2bb1316e5a62edb4a79e3766698517efa441e2eaa2368fa239d09c2c5d521deaf2a3d2c26954ca17c", 0x9c}, {&(0x7f0000000900)="950450aeef3a8a26475c7d94e6e907f175b8a180914bc9e00b93858ff60f0b3211ebcb2886e022d57f554c8c27c5511cab27079b80dfeb4bce43ba0cb2817668db42b112994fe975", 0x48}, {&(0x7f00000002c0)="988f581816025e543b8102e8dca515aeda5894566f72a39d72c6067a31bf396a67e2b9227300aa12", 0x28}, {&(0x7f0000000380)="217dca126188c77d8f616ea022958a5134819702cd6cd63ecd958cea3a1e1832838f9927d2039d240d72d9", 0x2b}, {&(0x7f0000000a80)="178e30ad1a821f94b31c96b1b84888c44607649eb375c7890a1933cc3aad69e0ea5969a4bab2596d73bb60e5e4980bfd2f2e5382581e89d3c6c3bd704af31818e6aa07f3bfd5d1c44ba285b02d422f8ab4ce", 0x52}], 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 3 (id=10356): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x2, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000200)={'pimreg1\x00', 0x2}) r3 = socket$rds(0x15, 0x5, 0x0) connect$rds(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r3, 0x0, &(0x7f0000000140)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x2, 0x5, 0x4f0, 0xf0, 0x208, 0xffffffff, 0x350, 0x350, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@empty, @icmp_id=0x65, @icmp_id=0x69}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "1bd8"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'dummy0\x00', 'pim6reg1\x00', {0xff}, {}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28}, {'8}'}}, @common=@frag={{0x30}, {[0x130, 0x8], 0x8, 0x4, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000140)=0x8, 0x4) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x400, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000600)={r6, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0xe}}, 0x0, 0x9, 0x5, 0x0, 0x44, 0x9}, 0x9c) sendto$inet6(r0, 0x0, 0xffffffb4, 0x890, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$PROG_LOAD(0x1e, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000004e94b5540000000000004f0004000100000000000800030000000000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0x3}, 0x28) socket$pppl2tp(0x18, 0x1, 0x1) kernel console output (not intermixed with test programs): lock nbd6: shutting down sockets [ 796.929338][ T2267] blk_print_req_error: 138 callbacks suppressed [ 796.929353][ T2267] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 796.966502][ T2267] buffer_io_error: 138 callbacks suppressed [ 796.966518][ T2267] Buffer I/O error on dev nbd6, logical block 0, async page read [ 796.984717][ T2267] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 796.996146][ T2267] Buffer I/O error on dev nbd6, logical block 1, async page read [ 797.008324][ T2267] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.019814][ T2267] Buffer I/O error on dev nbd6, logical block 2, async page read [ 797.031107][ T2267] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.054564][ T4732] tipc: Resetting bearer [ 797.064387][ T2267] Buffer I/O error on dev nbd6, logical block 3, async page read [ 797.076675][ T2267] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.098425][ T2267] Buffer I/O error on dev nbd6, logical block 0, async page read [ 797.152911][ T2267] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.173048][ T4740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.175766][ T2267] Buffer I/O error on dev nbd6, logical block 1, async page read [ 797.190230][ T7277] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.202910][ T7277] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.213177][ T2267] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.224486][ T7277] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.244270][ T2267] Buffer I/O error on dev nbd6, logical block 2, async page read [ 797.255795][ T7277] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.290112][ T2267] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.344943][ T2267] Buffer I/O error on dev nbd6, logical block 3, async page read [ 797.371904][ T2267] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.381559][ T2267] Buffer I/O error on dev nbd6, logical block 0, async page read [ 797.406985][ T2267] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.437702][ T2267] Buffer I/O error on dev nbd6, logical block 1, async page read [ 797.468784][ T4755] syzkaller0: entered promiscuous mode [ 797.473404][ T2267] ldm_validate_partition_table(): Disk read failed. [ 797.481299][ T2267] Dev nbd6: unable to read RDB block 0 [ 797.486761][ T4755] syzkaller0: entered allmulticast mode [ 797.518996][ T2267] nbd6: unable to read partition table [ 797.558329][T19593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.568603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.588272][ T2267] ldm_validate_partition_table(): Disk read failed. [ 797.611001][ T4749] netlink: 'syz.2.8627': attribute type 1 has an invalid length. [ 797.633727][ T2267] Dev nbd6: unable to read RDB block 0 [ 797.639534][ T4749] netlink: 'syz.2.8627': attribute type 3 has an invalid length. [ 797.647143][ T4768] Unsupported ieee802154 address type: 0 [ 797.661572][ T2267] nbd6: unable to read partition table [ 797.671790][ T4749] NCSI netlink: No device for ifindex 813332851 [ 797.873781][ T7277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.883547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.944493][ T4787] netlink: 'syz.0.8636': attribute type 1 has an invalid length. [ 798.513557][ T7275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.523186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.599720][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.609169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.844917][ T4862] tipc: Enabled bearer , priority 0 [ 799.425016][ T4897] veth0: entered promiscuous mode [ 799.535397][ T4901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 799.588275][ T4904] 8021q: adding VLAN 0 to HW filter on device bond10 [ 799.813092][ T4895] veth0: left promiscuous mode [ 799.835599][ T4928] netlink: 'syz.3.8675': attribute type 2 has an invalid length. [ 799.865633][ T4929] __nla_validate_parse: 14 callbacks suppressed [ 799.865652][ T4929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8674'. [ 799.984926][ T4935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8676'. [ 800.032615][ T4943] netlink: 'syz.3.8680': attribute type 1 has an invalid length. [ 800.414341][ T4988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8689'. [ 800.425253][ T4988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8689'. [ 800.469183][ T4988] gretap1: entered promiscuous mode [ 800.507920][ T4988] gretap1: entered allmulticast mode [ 800.508083][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8690'. [ 800.652665][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8696'. [ 800.679877][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8695'. [ 800.702580][ T5008] netlink: 50 bytes leftover after parsing attributes in process `syz.1.8695'. [ 800.712042][ T5008] netlink: 50 bytes leftover after parsing attributes in process `syz.1.8695'. [ 800.756103][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8697'. [ 800.926571][ T5032] netlink: 'syz.4.8700': attribute type 7 has an invalid length. [ 801.263930][ T5059] netlink: 'syz.1.8710': attribute type 11 has an invalid length. [ 801.350965][ T5062] xt_socket: unknown flags 0x50 [ 801.408266][ T5071] netlink: 'syz.0.8713': attribute type 10 has an invalid length. [ 801.422081][ T5071] .: left allmulticast mode [ 801.426724][ T5071] .: left promiscuous mode [ 801.459006][ T5071] bridge0: port 2(.) entered disabled state [ 801.511107][ T5071] bond0: (slave .): Enslaving as an active interface with an up link [ 801.642952][ T5088] netlink: 'syz.4.8715': attribute type 1 has an invalid length. [ 801.652514][ T5088] netlink: 'syz.4.8715': attribute type 1 has an invalid length. [ 801.660264][ T5088] netlink: 'syz.4.8715': attribute type 1 has an invalid length. [ 801.713020][ T5087] net_ratelimit: 9 callbacks suppressed [ 801.713041][ T5087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.727172][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.735302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.743858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.751997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.760590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.777408][ T5088] netlink: 'syz.4.8715': attribute type 2 has an invalid length. [ 802.033291][ T5101] netlink: 'syz.3.8721': attribute type 1 has an invalid length. [ 802.308758][ T5116] netlink: 'syz.0.8727': attribute type 1 has an invalid length. [ 802.368203][ T5116] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.758209][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.768016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.870364][ T5156] sit2: entered allmulticast mode [ 802.888490][ T5157] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 802.960543][ T5834] block nbd7: Receive control failed (result -32) [ 803.145007][ T5179] xt_TPROXY: Can be used only with -p tcp or -p udp [ 803.537618][ T5193] syzkaller1: entered promiscuous mode [ 803.552605][ T5193] syzkaller1: entered allmulticast mode [ 803.633798][ T4972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.642694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.134600][ T5248] nftables ruleset with unbound chain [ 804.236021][ T5255] Cannot find add_set index 0 as target [ 804.748438][ T5289] veth0_macvtap: left promiscuous mode [ 804.762706][ T5289] macvtap0: entered allmulticast mode [ 804.781267][ T5289] macvtap0: refused to change device tx_queue_len [ 805.880475][ T5367] __nla_validate_parse: 23 callbacks suppressed [ 805.880495][ T5367] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.8794'. [ 805.939576][ T5369] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8792'. [ 805.998553][ T5374] bond8: option min_links: invalid value (18446744073709551614) [ 806.006366][ T5374] bond8: option min_links: allowed values 0 - 2147483647 [ 806.016162][ T5374] bond8 (unregistering): Released all slaves [ 806.053336][ T5378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8796'. [ 806.063142][ T5379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8796'. [ 806.093954][ T5378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8796'. [ 806.179685][ T5381] netlink: 564 bytes leftover after parsing attributes in process `syz.3.8797'. [ 806.218995][ T5381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8797'. [ 806.236128][ T5381] validate_nla: 6 callbacks suppressed [ 806.236147][ T5381] netlink: 'syz.3.8797': attribute type 2 has an invalid length. [ 806.253739][ T5381] netlink: 'syz.3.8797': attribute type 3 has an invalid length. [ 806.261568][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8797'. [ 806.333086][ T5390] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 806.424021][ T5392] netem: incorrect gi model size [ 806.429507][ T5392] netem: change failed [ 806.489698][ T5396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8803'. [ 806.916127][ T5942] net_ratelimit: 16 callbacks suppressed [ 806.916141][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.930521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.955080][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.964087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.992856][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.001403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.392489][ T4965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.400624][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.408864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.417001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.032227][ T11] block nbd4: Possible stuck request ffff888026018000: control (read@0,1024B). Runtime 120 seconds [ 810.043537][ T11] block nbd4: Possible stuck request ffff888026018200: control (read@1024,1024B). Runtime 120 seconds [ 810.054559][ T11] block nbd4: Possible stuck request ffff888026018400: control (read@2048,1024B). Runtime 120 seconds [ 810.065567][ T11] block nbd4: Possible stuck request ffff888026018600: control (read@3072,1024B). Runtime 120 seconds [ 814.512436][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.520566][ T7272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.528702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.536816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.152723][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.161289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.273396][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.281850][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.289964][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.298099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.306217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.314318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.032667][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.040786][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.048906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.057182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.065320][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.073962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.152820][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.161024][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.170121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.178566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.792795][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.801044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.152168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.197047][ T5442] netlink: 'syz.2.8810': attribute type 10 has an invalid length. [ 835.206908][ T5439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8813'. [ 835.243033][ T5442] team0: Port device dummy0 added [ 835.254987][ T5439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8813'. [ 835.267799][ T5439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8813'. [ 835.292447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.479311][ T5464] Cannot find add_set index 0 as target [ 835.576002][ T5470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8822'. [ 835.655687][ T5477] netlink: 'syz.2.8824': attribute type 1 has an invalid length. [ 835.780343][ T5484] bond11: option lp_interval: invalid value (0) [ 835.787489][ T5484] bond11: option lp_interval: allowed values 1 - 2147483647 [ 835.797832][ T5484] bond11 (unregistering): Released all slaves [ 835.932500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.094656][ T5505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8830'. [ 836.192413][ T4972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.201346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.391687][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8834'. [ 836.456580][ T5537] netlink: 'syz.4.8834': attribute type 1 has an invalid length. [ 836.619599][ T5537] xt_l2tp: missing protocol rule (udp|l2tpip) [ 836.654637][ T5523] veth5: entered promiscuous mode [ 836.708190][ T5551] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8837'. [ 836.912819][ T1944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.921467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.994034][ T5578] netlink: 'syz.1.8844': attribute type 15 has an invalid length. [ 837.022177][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8844'. [ 837.163856][ T5584] netlink: 'syz.2.8846': attribute type 29 has an invalid length. [ 837.172539][ T5584] netlink: 'syz.2.8846': attribute type 29 has an invalid length. [ 837.182679][ T5584] xt_limit: Overflow, try lower: 604147548/4200216962 [ 837.232362][ T5598] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8848'. [ 837.244090][ T5598] netlink: 'syz.0.8848': attribute type 1 has an invalid length. [ 837.488002][ T5616] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8853'. [ 837.554412][ T4962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.563992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.585729][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 837.602808][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 837.611574][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 837.619839][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 837.627750][ T5620] netlink: 'syz.2.8854': attribute type 1 has an invalid length. [ 837.640116][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 837.697503][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 837.706470][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 837.717667][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 837.729344][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 837.737477][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 838.347719][ T5655] netlink: 'syz.2.8861': attribute type 1 has an invalid length. [ 838.361042][ T5658] netlink: 'syz.2.8861': attribute type 1 has an invalid length. [ 838.470783][ T5662] netlink: 'syz.4.8864': attribute type 11 has an invalid length. [ 838.775859][ T5617] C speed is unknown, defaulting to 1000 [ 839.354199][ T5617] chnl_net:caif_netlink_parms(): no params data found [ 839.411158][ T5710] Unknown options in mask b7f2 [ 839.489313][ T5706] syzkaller0: entered promiscuous mode [ 839.495559][ T5722] openvswitch: netlink: Invalid VLAN frame [ 839.511536][ T5706] syzkaller0: entered allmulticast mode [ 839.526803][ T5706] 0: reclassify loop, rule prio 0, protocol 800 [ 839.581032][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.588401][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.596048][ T5617] bridge_slave_0: entered allmulticast mode [ 839.604271][ T5617] bridge_slave_0: entered promiscuous mode [ 839.614827][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.622108][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.629364][ T5617] bridge_slave_1: entered allmulticast mode [ 839.637983][ T5617] bridge_slave_1: entered promiscuous mode [ 839.696346][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.723203][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.802409][ T5834] Bluetooth: hci4: command tx timeout [ 839.855363][ T5617] team0: Port device team_slave_0 added [ 839.918351][ T5617] team0: Port device team_slave_1 added [ 839.989922][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.014454][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.063221][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.083796][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.095035][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.130233][ T11] block nbd4: Possible stuck request ffff888026018000: control (read@0,1024B). Runtime 150 seconds [ 840.141058][ T11] block nbd4: Possible stuck request ffff888026018200: control (read@1024,1024B). Runtime 150 seconds [ 840.153158][ T11] block nbd4: Possible stuck request ffff888026018400: control (read@2048,1024B). Runtime 150 seconds [ 840.164211][ T11] block nbd4: Possible stuck request ffff888026018600: control (read@3072,1024B). Runtime 150 seconds [ 840.175227][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.199948][ T5762] netlink: 'syz.3.8890': attribute type 11 has an invalid length. [ 840.215308][ T5753] bond7: Invalid ad_actor_system MAC address. [ 840.221447][ T5753] bond7: option ad_actor_system: invalid value (1) [ 840.229658][ T5753] bond7 (unregistering): Released all slaves [ 840.281319][ T5617] hsr_slave_0: entered promiscuous mode [ 840.288110][ T5617] hsr_slave_1: entered promiscuous mode [ 840.300995][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 840.306846][ T5617] Cannot create hsr debugfs directory [ 840.538632][ T5617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.551123][ T5617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 840.655732][ T5617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.666864][ T5617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 840.750033][ T5617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.761298][ T5617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 840.837574][ T5617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.848382][ T5617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 840.963813][ T5770] validate_nla: 6 callbacks suppressed [ 840.963829][ T5770] netlink: 'syz.2.8893': attribute type 23 has an invalid length. [ 841.045826][ T5771] netlink: 'syz.2.8893': attribute type 23 has an invalid length. [ 841.083743][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.097108][ T5792] netlink: 'syz.3.8900': attribute type 2 has an invalid length. [ 841.120317][ T5794] __nla_validate_parse: 15 callbacks suppressed [ 841.120337][ T5794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8901'. [ 841.137808][ T5795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8901'. [ 841.140788][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 841.209471][ T5792] 9: entered promiscuous mode [ 841.216844][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 841.249151][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 841.328942][ T5817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8906'. [ 841.392607][T13328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.401765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.430382][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.446020][ T5823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8905'. [ 841.459692][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.488590][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.495806][ T4964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.511094][ T5827] netlink: 'syz.4.8907': attribute type 39 has an invalid length. [ 841.575885][ T4972] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.583168][ T4972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.685623][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8910'. [ 841.704138][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8910'. [ 841.847170][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.872647][ T5834] Bluetooth: hci4: command tx timeout [ 841.911051][ T5617] veth0_vlan: entered promiscuous mode [ 841.938971][ T5617] veth1_vlan: entered promiscuous mode [ 841.986044][ T5617] veth0_macvtap: entered promiscuous mode [ 841.998559][ T5617] veth1_macvtap: entered promiscuous mode [ 842.000348][ T5852] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8912'. [ 842.020707][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.044904][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.071575][ T4968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.081642][ T4968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.091480][ T4968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.111576][ T4968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.195409][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8913'. [ 842.233935][ T4972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.244998][ T5857] netlink: 'syz.4.8913': attribute type 33 has an invalid length. [ 842.252894][ T4972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.295445][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8913'. [ 842.320719][ T5857] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 842.334706][ T5857] bond10 (unregistering): Released all slaves [ 842.339138][ T5828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.371378][ T5860] ksmbd: Unknown IPC event: 3, ignore. [ 842.406744][ T4972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.417953][ T4972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.499616][ T5866] sctp: [Deprecated]: syz.3.8917 (pid 5866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 842.499616][ T5866] Use struct sctp_sack_info instead [ 842.585797][ T5878] netlink: 'syz.4.8920': attribute type 16 has an invalid length. [ 842.594957][ T5879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8917'. [ 842.673267][ T4964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.682248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.835485][ T5890] netlink: 'syz.1.8924': attribute type 4 has an invalid length. [ 842.869347][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 842.879710][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 842.887900][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 842.896338][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 842.905203][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 843.140099][ T5907] sctp: [Deprecated]: syz.1.8927 (pid 5907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.140099][ T5907] Use struct sctp_sack_info instead [ 843.202240][ T5908] sctp: [Deprecated]: syz.1.8927 (pid 5908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.202240][ T5908] Use struct sctp_sack_info instead [ 843.315845][ T4972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.324868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.858418][ T5955] netlink: 'syz.1.8938': attribute type 1 has an invalid length. [ 843.953107][ T5834] Bluetooth: hci4: command tx timeout [ 844.010653][ T5959] gretap1: entered promiscuous mode [ 844.048511][ T5891] C speed is unknown, defaulting to 1000 [ 844.099257][ T5965] pimreg3: entered allmulticast mode [ 844.231268][ T5970] netlink: 'syz.1.8943': attribute type 1 has an invalid length. [ 844.832941][ T6002] sctp: [Deprecated]: syz.1.8950 (pid 6002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 844.832941][ T6002] Use struct sctp_sack_info instead [ 844.916403][ T5834] block nbd8: Receive control failed (result -32) [ 844.956391][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 844.992995][ T5834] Bluetooth: hci0: command tx timeout [ 845.249850][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.258839][ T6032] Bluetooth: MGMT ver 1.23 [ 845.267399][ T6026] atomic_op ffff88802fc26198 conn xmit_atomic 0000000000000000 [ 845.287847][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.317885][ T5891] bridge_slave_0: entered allmulticast mode [ 845.374922][ T5891] bridge_slave_0: entered promiscuous mode [ 845.385989][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.415405][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.429299][ T5891] bridge_slave_1: entered allmulticast mode [ 845.440252][ T5891] bridge_slave_1: entered promiscuous mode [ 845.503518][ T6042] syzkaller0: entered promiscuous mode [ 845.509001][ T6042] syzkaller0: entered allmulticast mode [ 845.520342][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.547628][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.577253][ T5891] team0: Port device team_slave_0 added [ 845.585835][ T6042] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 845.599652][ T5891] team0: Port device team_slave_1 added [ 846.039542][ T5834] Bluetooth: hci4: command tx timeout [ 847.077240][ T5834] Bluetooth: hci0: command tx timeout [ 847.155541][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.164633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.445006][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.458298][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.493716][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.507935][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.520957][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.551522][ T6069] __nla_validate_parse: 8 callbacks suppressed [ 847.551647][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8963'. [ 847.553521][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.567502][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8963'. [ 847.635743][ T6062] pimreg: left allmulticast mode [ 847.696010][ T6074] xt_NFQUEUE: number of total queues is 0 [ 847.706524][ T5891] hsr_slave_0: entered promiscuous mode [ 847.714286][ T6074] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 847.716619][ T5891] hsr_slave_1: entered promiscuous mode [ 847.729288][ T5891] debugfs: 'hsr0' already exists in 'hsr' [ 847.735624][ T5891] Cannot create hsr debugfs directory [ 847.747074][ T6072] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 847.805956][ T6080] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8966'. [ 847.910619][ T6082] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.8968'. [ 848.025591][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8969'. [ 848.141972][ T6086] veth7: entered promiscuous mode [ 848.197292][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8971'. [ 848.330173][ T5891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.443198][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.452216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.524376][ T5891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.658611][ T5891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.685949][ T6134] netlink: 'syz.3.8982': attribute type 1 has an invalid length. [ 848.823431][ T5891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.842512][ T6143] bond0: Error: Cannot enslave bond to itself. [ 849.036300][ T6157] netlink: 'syz.1.8990': attribute type 2 has an invalid length. [ 849.075996][ T6159] netlink: 'syz.2.8991': attribute type 10 has an invalid length. [ 849.076376][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8990'. [ 849.088448][ T6159] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 849.094721][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.111684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.124891][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8990'. [ 849.155788][ T5834] Bluetooth: hci0: command tx timeout [ 849.164610][ T6157] macvtap1: entered promiscuous mode [ 849.170538][ T6157] vlan0: entered promiscuous mode [ 849.177514][ T6157] macvtap1: entered allmulticast mode [ 849.189642][ T6157] vlan0: entered allmulticast mode [ 849.195931][ T6157] veth0_vlan: entered allmulticast mode [ 849.271860][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 849.287648][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 849.301491][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 849.323026][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 849.496482][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.549707][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.578694][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.585866][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.595705][ T6186] netlink: 'syz.4.8996': attribute type 9 has an invalid length. [ 849.607757][ T6188] netlink: 'syz.1.8995': attribute type 6 has an invalid length. [ 849.611936][ T6186] netlink: 'syz.4.8996': attribute type 11 has an invalid length. [ 849.625502][ T6186] netlink: 'syz.4.8996': attribute type 12 has an invalid length. [ 849.644519][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.649392][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8996'. [ 849.651664][ T7277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.692344][ T6186] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.8996'. [ 849.883668][ T6196] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 849.975200][ T6205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 849.982585][ T6205] IPv6: NLM_F_CREATE should be set when creating new route [ 849.989811][ T6205] IPv6: NLM_F_CREATE should be set when creating new route [ 850.045768][ T6205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.061653][ T6210] gretap0: entered promiscuous mode [ 850.088195][ T6210] gretap0: left promiscuous mode [ 850.226030][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.370514][ T5891] veth0_vlan: entered promiscuous mode [ 850.428662][ T5891] veth1_vlan: entered promiscuous mode [ 850.463956][ T6239] syzkaller0: entered promiscuous mode [ 850.471320][ T6239] syzkaller0: entered allmulticast mode [ 850.523880][ T5891] veth0_macvtap: entered promiscuous mode [ 850.544630][ T5891] veth1_macvtap: entered promiscuous mode [ 850.632566][ T6246] geneve2: entered promiscuous mode [ 850.727571][ T6253] netlink: 'syz.3.9014': attribute type 1 has an invalid length. [ 850.776987][ T6230] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 850.777850][ T6251] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 850.780725][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.816080][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.829442][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.866316][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.906421][ T6261] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 850.937047][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.002750][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.210428][ T4969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.232305][ T5834] Bluetooth: hci0: command tx timeout [ 851.242625][ T4969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.289869][ T4969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.323141][ T4969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.545362][ T6284] netlink: 'syz.4.9023': attribute type 14 has an invalid length. [ 851.861642][ T6315] x_tables: unsorted underflow at hook 3 [ 852.150684][ T6333] netlink: 'syz.4.9039': attribute type 3 has an invalid length. [ 852.543456][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 852.554681][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 852.564765][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 852.572726][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 852.580358][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 852.580553][ T6347] syzkaller0: entered promiscuous mode [ 852.621855][ T6347] syzkaller0: entered allmulticast mode [ 852.681660][ T6347] TC_ACT_REPEAT abuse ? [ 852.847558][ T6350] __nla_validate_parse: 13 callbacks suppressed [ 852.847576][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9040'. [ 852.916012][ T4971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.924985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.132227][ T6358] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9046'. [ 853.311839][ T6364] tipc: Enabled bearer , priority 0 [ 853.333095][ T6364] syzkaller0: entered promiscuous mode [ 853.338597][ T6364] syzkaller0: entered allmulticast mode [ 853.449990][ T6364] tipc: Resetting bearer [ 853.487349][ T6364] tipc: Disabling bearer [ 853.587139][ T6345] C speed is unknown, defaulting to 1000 [ 853.620714][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9052'. [ 853.627873][ T6385] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9051'. [ 853.960288][ T6406] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9059'. [ 853.971183][ T6406] syzkaller1: entered promiscuous mode [ 853.976885][ T6406] syzkaller1: entered allmulticast mode [ 854.078695][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9064'. [ 854.121088][ T6417] syzkaller0: entered promiscuous mode [ 854.140424][ T6417] syzkaller0: entered allmulticast mode [ 854.198056][ T7274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.206528][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.214685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.222817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.279921][ T6428] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 854.392974][ T6433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9069'. [ 854.646880][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 854.676458][ T5838] Bluetooth: hci5: command tx timeout [ 854.728939][ T6454] validate_nla: 1 callbacks suppressed [ 854.728959][ T6454] netlink: 'syz.2.9074': attribute type 32 has an invalid length. [ 854.747854][ T6460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9076'. [ 854.748725][ T6458] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 854.768695][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9074'. [ 854.818997][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9078'. [ 854.858989][ T6454] bond7: Setting coupled_control to off (0) [ 854.980762][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.014241][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.021540][ T6345] bridge_slave_0: entered allmulticast mode [ 855.054074][ T6345] bridge_slave_0: entered promiscuous mode [ 855.101502][ T6485] team0: Port device dummy0 removed [ 855.114033][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.121467][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.129232][ T6345] bridge_slave_1: entered allmulticast mode [ 855.139537][ T6345] bridge_slave_1: entered promiscuous mode [ 855.179262][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.202645][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.264614][ T6345] team0: Port device team_slave_0 added [ 855.285119][ T6345] team0: Port device team_slave_1 added [ 855.323409][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.330387][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.357719][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.374130][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.381097][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.408420][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.429751][ T6498] veth3: entered allmulticast mode [ 855.489974][ T6345] hsr_slave_0: entered promiscuous mode [ 855.501338][ T6345] hsr_slave_1: entered promiscuous mode [ 855.508079][ T6345] debugfs: 'hsr0' already exists in 'hsr' [ 855.514211][ T6345] Cannot create hsr debugfs directory [ 855.619596][ T6345] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.629780][ T6345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.641607][ T6345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 855.689775][ T6345] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.699748][ T6345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.709523][ T6345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 855.769038][ T6345] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.778806][ T6489] netlink: 'syz.3.9082': attribute type 1 has an invalid length. [ 855.780092][ T6501] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 855.786984][ T6345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.787051][ T6345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 855.958297][ T6345] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.974287][ T6345] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.985991][ T6345] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 856.213812][ T6505] syzkaller0: entered promiscuous mode [ 856.219472][ T6505] syzkaller0: entered allmulticast mode [ 856.761066][ T5838] Bluetooth: hci5: command tx timeout [ 858.029985][ T6345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 858.043176][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.052468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.076730][ T6345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 858.097896][ T6345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 858.129816][ T6551] __nla_validate_parse: 3 callbacks suppressed [ 858.129834][ T6551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9097'. [ 858.146746][ T6551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9097'. [ 858.158448][ T6546] tipc: Started in network mode [ 858.167288][ T6546] tipc: Node identity be84d639ca7f, cluster identity 4711 [ 858.176172][ T6546] tipc: Enabled bearer , priority 0 [ 858.187998][ T6345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 858.206916][ T6546] syzkaller0: entered promiscuous mode [ 858.213788][ T6546] syzkaller0: entered allmulticast mode [ 858.233252][ T6544] tipc: Resetting bearer [ 858.264690][ T6544] tipc: Disabling bearer [ 858.454704][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.476408][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9103'. [ 858.518849][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.549699][ T4969] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.556914][ T4969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.605570][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.612790][ T4964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.836946][ T5838] Bluetooth: hci5: command tx timeout [ 858.961355][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.215646][ T6575] C speed is unknown, defaulting to 1000 [ 859.270616][ T6345] veth0_vlan: entered promiscuous mode [ 859.349988][ T6345] veth1_vlan: entered promiscuous mode [ 859.390134][ T6345] veth0_macvtap: entered promiscuous mode [ 859.405260][ T6602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9111'. [ 859.433055][ T6345] veth1_macvtap: entered promiscuous mode [ 859.484366][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.518524][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.561569][ T4965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.576762][ T4965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.597582][ T4965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.629301][ T4965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.661460][ T6611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9114'. [ 859.671380][ T6610] pim6reg1: entered promiscuous mode [ 859.679736][ T6610] pim6reg1: entered allmulticast mode [ 859.813289][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9116'. [ 859.840687][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9118'. [ 859.870235][ T6621] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9118'. [ 859.956872][ T4967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.966321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.076883][ T4968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.096910][ T4968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.208352][ T7274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.227011][ T7274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.238157][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9124'. [ 860.429756][ T6641] netlink: zone id is out of range [ 860.446579][ T6641] netlink: get zone limit has 4 unknown bytes [ 860.585761][ T6649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.855940][ T6658] syzkaller1: entered promiscuous mode [ 860.862804][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9130'. [ 860.884044][ T6658] syzkaller1: entered allmulticast mode [ 860.916276][ T5838] Bluetooth: hci5: command tx timeout [ 861.575246][ T6700] netlink: 'syz.0.9149': attribute type 10 has an invalid length. [ 861.644824][ T6700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.676851][ T6700] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 861.689973][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.710233][ T6710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.743420][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.761102][ T6710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.838674][ T6710] bond0: (slave batadv0): Releasing backup interface [ 861.915124][ T6718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 861.924392][ T6727] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 861.929497][ T6717] netlink: 'syz.2.9151': attribute type 1 has an invalid length. [ 862.129400][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.244626][ T6740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.259711][ T6751] x_tables: duplicate underflow at hook 4 [ 862.567604][ T6769] bond0: (slave gre0): Error: Device type is different from other slaves [ 862.619233][ T6769] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 862.720415][ T6779] gtp0: entered promiscuous mode [ 863.136278][ T6794] __nla_validate_parse: 10 callbacks suppressed [ 863.136298][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9177'. [ 863.203959][ T6794] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9177'. [ 863.215970][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.227168][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.238386][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.246488][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.254355][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.504987][T28487] bond0: (slave syz_tun): Releasing backup interface [ 863.703733][ T6824] netlink: 'syz.0.9187': attribute type 39 has an invalid length. [ 863.715667][ T6823] netlink: 'syz.0.9187': attribute type 39 has an invalid length. [ 863.794232][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.803172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.007618][ T6797] C speed is unknown, defaulting to 1000 [ 864.193966][ T6859] netlink: 348 bytes leftover after parsing attributes in process `syz.3.9196'. [ 864.413774][ T6875] : renamed from hsr0 (while UP) [ 864.425775][ T6875] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9200'. [ 864.614188][ T6885] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9202'. [ 864.637176][ T6885] netlink: 'syz.1.9202': attribute type 2 has an invalid length. [ 864.655908][ T6885] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9202'. [ 864.679631][ T6888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9203'. [ 864.737632][ T6881] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 864.747842][ T6881] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 864.788742][ T6888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9203'. [ 864.839526][ T6888] ipt_REJECT: TCP_RESET invalid for non-tcp [ 864.858638][ T6797] chnl_net:caif_netlink_parms(): no params data found [ 864.907804][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9207'. [ 864.970092][ T6898] gtp1: entered promiscuous mode [ 864.980094][ T6898] gtp1: entered allmulticast mode [ 864.994523][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9207'. [ 865.197993][ T6913] netlink: 'syz.3.9211': attribute type 8 has an invalid length. [ 865.233632][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.240869][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.269662][ T6797] bridge_slave_0: entered allmulticast mode [ 865.278433][ T6797] bridge_slave_0: entered promiscuous mode [ 865.298044][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.306231][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.317763][ T6797] bridge_slave_1: entered allmulticast mode [ 865.326169][ T5834] Bluetooth: hci2: command tx timeout [ 865.339815][ T6797] bridge_slave_1: entered promiscuous mode [ 865.430460][ T6925] netlink: 'syz.0.9217': attribute type 1 has an invalid length. [ 865.434380][ T6797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.456790][ T6797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.580741][ T6930] veth5: entered promiscuous mode [ 865.595822][ T6931] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 865.617449][ T6931] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 865.634048][ T6931] bond1: (slave xfrm1): making interface the new active one [ 865.642927][ T6931] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 865.658527][ T6797] team0: Port device team_slave_0 added [ 865.680241][ T6925] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 865.711655][ T6925] bond1 (unregistering): Released all slaves [ 865.720629][ T4965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.729652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.772832][ T6797] team0: Port device team_slave_1 added [ 865.863947][ T6948] veth5: entered allmulticast mode [ 865.899417][ T6948] xt_hashlimit: invalid rate [ 865.906992][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.931705][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.967529][ T6797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.995779][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.005528][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.034338][ T6797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.153728][ T6797] hsr_slave_0: entered promiscuous mode [ 866.160467][ T6797] hsr_slave_1: entered promiscuous mode [ 866.184638][ T6797] debugfs: 'hsr0' already exists in 'hsr' [ 866.190412][ T6797] Cannot create hsr debugfs directory [ 866.276537][ T6975] tc_dump_action: action bad kind [ 866.499333][ T6986] netlink: 'syz.4.9238': attribute type 5 has an invalid length. [ 866.600439][ T6797] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.747793][ T6797] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.786061][ T7005] netlink: 'syz.1.9243': attribute type 5 has an invalid length. [ 866.830165][ T7007] netlink: 'syz.1.9243': attribute type 5 has an invalid length. [ 866.924608][ T6797] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.011081][ T6797] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.299096][ T6797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 867.316653][ T6797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 867.341415][ T6797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 867.385007][ T7033] bridge5: entered promiscuous mode [ 867.392193][ T5834] Bluetooth: hci2: command tx timeout [ 867.400949][ T7033] bridge5: entered allmulticast mode [ 867.462585][ T6797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 867.676133][ T7027] infiniband : set down [ 867.680532][ T7027] infiniband : added ipvlan0 [ 867.727685][ T7027] RDS/IB: : added [ 867.731485][ T7027] smc: adding ib device  with port count 1 [ 867.752141][ T7027] smc: ib device  port 1 has no pnetid [ 867.803491][ T7062] netlink: 'syz.4.9259': attribute type 11 has an invalid length. [ 867.852570][ T6797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.885801][ T6797] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.938432][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.945657][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.991756][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.998968][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.031087][ T7068] IPv6: Can't replace route, no match found [ 868.038925][ T7068] netlink: 'syz.4.9260': attribute type 1 has an invalid length. [ 868.053537][ T7068] netlink: 'syz.4.9260': attribute type 1 has an invalid length. [ 868.085670][ T7068] netlink: 'syz.4.9260': attribute type 8 has an invalid length. [ 868.189939][ T7073] netlink: 'syz.3.9262': attribute type 2 has an invalid length. [ 868.242003][ T7075] __nla_validate_parse: 20 callbacks suppressed [ 868.242022][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9262'. [ 868.480232][ T7094] xt_socket: unknown flags 0x50 [ 868.566468][ T6797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.612604][ T7101] xt_bpf: check failed: parse error [ 868.639138][ T7101] netlink: 'syz.4.9269': attribute type 2 has an invalid length. [ 868.724093][ T6797] veth0_vlan: entered promiscuous mode [ 868.767460][ T6797] veth1_vlan: entered promiscuous mode [ 868.937275][ T6797] veth0_macvtap: entered promiscuous mode [ 868.948049][ T6797] veth1_macvtap: entered promiscuous mode [ 868.976189][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.992872][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.017661][ T4966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.039972][ T4966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.103232][ T4966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.114608][ T4966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.157491][ T7121] netlink: 'syz.0.9275': attribute type 2 has an invalid length. [ 869.309969][ T7124] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 869.358280][ T7277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.376202][ T7277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.467210][ T4965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.482961][ T5834] Bluetooth: hci2: command tx timeout [ 869.488543][ T4965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.543456][ T7135] xt_addrtype: ipv6 does not support BROADCAST matching [ 869.878673][ T7159] IPVS: Unknown mcast interface: dvmrp0 [ 869.987764][ T7161] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 870.000904][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9287'. [ 870.017467][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9287'. [ 870.057839][ T7165] netlink: 'syz.0.9285': attribute type 1 has an invalid length. [ 870.229779][ T11] block nbd4: Possible stuck request ffff888026018000: control (read@0,1024B). Runtime 180 seconds [ 870.241821][ T11] block nbd4: Possible stuck request ffff888026018200: control (read@1024,1024B). Runtime 180 seconds [ 870.253456][ T11] block nbd4: Possible stuck request ffff888026018400: control (read@2048,1024B). Runtime 180 seconds [ 870.264642][ T11] block nbd4: Possible stuck request ffff888026018600: control (read@3072,1024B). Runtime 180 seconds [ 870.590912][ T7187] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.9296'. [ 870.969499][ T7207] sch_fq: defrate 0 ignored. [ 870.978712][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9301'. [ 871.286955][ T7213] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9304'. [ 871.365771][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9305'. [ 871.366509][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9305'. [ 871.511088][ T7221] gretap1: entered promiscuous mode [ 871.529674][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9307'. [ 871.566800][ T5838] Bluetooth: hci2: command tx timeout [ 871.726691][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.741692][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.754048][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.757478][ T7172] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 871.762359][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.802446][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.812686][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.852425][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.860065][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.925225][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 871.956707][ T7234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 872.094497][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9315'. [ 872.424099][ T7280] SET target dimension over the limit! [ 872.439553][ T7280] SET target dimension over the limit! [ 872.572586][ T7301] netlink: 'syz.1.9326': attribute type 1 has an invalid length. [ 872.592189][ T7301] netlink: 'syz.1.9326': attribute type 2 has an invalid length. [ 872.985042][ T7326] netlink: 'syz.3.9338': attribute type 9 has an invalid length. [ 873.002024][ T7326] netlink: 'syz.3.9338': attribute type 11 has an invalid length. [ 873.019012][ T7326] netlink: 'syz.3.9338': attribute type 12 has an invalid length. [ 873.439555][ T7343] netlink: 'syz.0.9344': attribute type 2 has an invalid length. [ 873.445478][ T6348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 873.469795][ T6348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 873.481205][ T6348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 873.521271][ T6348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 873.529868][ T6348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 873.635308][ T6348] Bluetooth: hci2: command 0x0405 tx timeout [ 875.251622][ T7277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.448682][ T7277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.464786][ T7373] netlink: 'syz.0.9353': attribute type 1 has an invalid length. [ 875.571492][ T7277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.642460][ T6348] Bluetooth: hci1: command tx timeout [ 875.680908][ T7277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.730697][ T7383] pim6reg1: entered promiscuous mode [ 875.737491][ T7383] pim6reg1: entered allmulticast mode [ 876.007647][ T7391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.061520][ T7342] C speed is unknown, defaulting to 1000 [ 876.138888][ T7398] __nla_validate_parse: 5 callbacks suppressed [ 876.138907][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9361'. [ 876.608119][ T7419] sock: sock_set_timeout: `syz.4.9363' (pid 7419) tries to set negative timeout [ 877.044487][ T7277] bond4 (unregistering): (slave bridge2): Releasing active interface [ 877.341002][ T7277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.353570][ T7277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.366735][ T7277] bond0 (unregistering): Released all slaves [ 877.476333][ T7277] bond1 (unregistering): Released all slaves [ 877.586191][ T7277] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 877.595339][ T7277] veth0_to_bond: left promiscuous mode [ 877.600911][ T7277] veth0_to_bond: left allmulticast mode [ 877.608640][ T7277] bond2 (unregistering): Released all slaves [ 877.714719][ T6348] Bluetooth: hci1: command tx timeout [ 877.722597][ T7277] bond3 (unregistering): Released all slaves [ 877.735788][ T7277] bond4 (unregistering): Released all slaves [ 877.842902][ T7277] bond5 (unregistering): Released all slaves [ 877.855412][ T7277] bond6 (unregistering): Released all slaves [ 877.867627][ T7277] bond7 (unregistering): Released all slaves [ 877.976118][ T7277] bond8 (unregistering): Released all slaves [ 878.078150][ T7277] bond9 (unregistering): Released all slaves [ 878.178952][ T7277] bond10 (unregistering): Released all slaves [ 878.193652][ T7277] bond11 (unregistering): Released all slaves [ 878.238446][ T7410] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 878.290553][ T7426] netlink: 'syz.2.9365': attribute type 32 has an invalid length. [ 878.423144][ T7429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 878.430499][ T7429] IPv6: NLM_F_CREATE should be set when creating new route [ 878.437813][ T7429] IPv6: NLM_F_CREATE should be set when creating new route [ 878.446565][ T7429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 878.478702][ T7277] 9: left promiscuous mode [ 878.666126][ T7277] tipc: Disabling bearer [ 878.671593][ T7277] tipc: Left network mode [ 878.775044][ T7430] syzkaller0: entered promiscuous mode [ 878.792314][ T7430] syzkaller0: entered allmulticast mode [ 878.819328][ T7443] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9369'. [ 878.854093][ T7431] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9367'. [ 878.888841][ T7431] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9367'. [ 878.989276][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9371'. [ 879.258791][ T7472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9373'. [ 879.796363][ T6348] Bluetooth: hci1: command tx timeout [ 881.202941][ T7502] openvswitch: netlink: Missing key (keys=40, expected=80) [ 881.224224][ T7494] netlink: 'syz.1.9376': attribute type 1 has an invalid length. [ 881.420995][ T7511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9382'. [ 881.459630][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9382'. [ 881.498416][ T7342] chnl_net:caif_netlink_parms(): no params data found [ 881.570936][ T7516] syzkaller0: entered promiscuous mode [ 881.583237][ T7516] syzkaller0: entered allmulticast mode [ 881.730690][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9385'. [ 881.818682][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9385'. [ 881.857097][ T7530] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 881.873435][ T5834] Bluetooth: hci1: command tx timeout [ 881.894844][ T7530] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 882.136963][ T7537] syzkaller1: entered promiscuous mode [ 882.155652][ T7537] syzkaller1: entered allmulticast mode [ 882.374932][ T7561] nbd: socks must be embedded in a SOCK_ITEM attr [ 882.387490][ T7563] IPv6: NLM_F_CREATE should be specified when creating new route [ 882.524298][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.553028][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.560333][ T7342] bridge_slave_0: entered allmulticast mode [ 882.630067][ T7342] bridge_slave_0: entered promiscuous mode [ 882.658090][ T7565] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 882.672712][ T7565] syzkaller1: linktype set to 823 [ 882.706188][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.746122][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.790492][ T7342] bridge_slave_1: entered allmulticast mode [ 882.870870][ T7342] bridge_slave_1: entered promiscuous mode [ 882.999264][ T7597] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9399'. [ 883.065080][ T7277] hsr_slave_0: left promiscuous mode [ 883.101116][ T7277] hsr_slave_1: left promiscuous mode [ 883.115390][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.139298][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.156325][ T7277] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 883.173971][ T7277] batman_adv: batadv0: Removing interface: ipvlan2 [ 883.222357][ T7277] veth1_vlan: left allmulticast mode [ 883.228003][ T7277] veth1_macvtap: left promiscuous mode [ 883.237099][ T7277] veth1_vlan: left promiscuous mode [ 883.468428][ T7277] pimreg3 (unregistering): left allmulticast mode [ 884.296246][ T4968] smc: removing ib device !yz! [ 884.571988][ T5200] udevd[5200]: worker [31354] /devices/virtual/block/nbd4 timeout; kill it [ 884.581060][ T5200] udevd[5200]: seq 34964 '/devices/virtual/block/nbd4' killed [ 884.699354][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.734480][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.811136][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9411'. [ 884.996812][ T7653] netlink: 'syz.4.9414': attribute type 1 has an invalid length. [ 885.028766][ T7648] netlink: 'syz.0.9412': attribute type 1 has an invalid length. [ 885.028943][ T7653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.043835][ T7653] IPv6: NLM_F_CREATE should be set when creating new route [ 885.153816][ T7655] netlink: 'syz.1.9413': attribute type 4 has an invalid length. [ 885.259891][ T7648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.281616][ T7651] tc_dump_action: action bad kind [ 885.347531][ T7649] bond1: (slave veth0_to_bond): making interface the new active one [ 885.403488][ T7671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9418'. [ 885.412606][ T7649] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 885.418796][ T7342] team0: Port device team_slave_0 added [ 885.434256][ T7672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9418'. [ 885.515876][ T7656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 885.526852][ T7656] bond1: (slave bond2): Enslaving as an active interface with a down link [ 885.629498][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.638755][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.755219][ T7342] team0: Port device team_slave_1 added [ 886.070471][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.100778][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.192821][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.277534][ T7688] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 886.309785][ T7688] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 886.333133][ T7688] gretap1: entered promiscuous mode [ 886.353985][ T7688] gretap1: entered allmulticast mode [ 886.370417][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.404428][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.457850][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.495020][ T7698] netlink: 'syz.2.9422': attribute type 10 has an invalid length. [ 886.557942][ T7698] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 886.696255][ T7708] xt_check_match: 23 callbacks suppressed [ 886.696275][ T7708] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 886.815460][ T7342] hsr_slave_0: entered promiscuous mode [ 886.842758][ T7342] hsr_slave_1: entered promiscuous mode [ 886.870589][ T7342] debugfs: 'hsr0' already exists in 'hsr' [ 886.889931][ T7342] Cannot create hsr debugfs directory [ 887.247846][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9431'. [ 887.290214][ T7735] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 887.304275][ T7739] netlink: 'syz.1.9431': attribute type 1 has an invalid length. [ 887.312254][ T7739] netlink: 'syz.1.9431': attribute type 2 has an invalid length. [ 887.347221][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9432'. [ 887.670884][ T7753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9437'. [ 887.971659][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9440'. [ 887.982062][ T7755] syzkaller0: entered promiscuous mode [ 888.001988][ T7755] syzkaller0: entered allmulticast mode [ 888.338191][ T7778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9444'. [ 888.369320][ T7776] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9444'. [ 888.567466][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9448'. [ 888.608459][ T7792] openvswitch: netlink: IP tunnel dst address not specified [ 888.711016][ T7799] TCP: TCP_TX_DELAY enabled [ 890.328739][ T7810] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9454'. [ 890.388705][ T7277] IPVS: stop unused estimator thread 0... [ 890.692008][ T7841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.867260][ T7841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.986848][ T7847] erspan0: entered promiscuous mode [ 891.039958][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9461'. [ 891.249652][T21390] IPVS: starting estimator thread 0... [ 891.363232][ T7879] IPVS: using max 30 ests per chain, 72000 per kthread [ 891.605642][ T7342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 891.664127][ T7342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 891.720279][ T7342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 891.776104][ T7342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 891.795488][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9476'. [ 892.025867][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.089994][ T7342] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.126034][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.133514][ T7282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.221277][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.228779][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.411560][ T7953] syzkaller1: entered promiscuous mode [ 892.426338][ T7953] syzkaller1: entered allmulticast mode [ 892.612126][ T7958] netlink: 'syz.4.9487': attribute type 33 has an invalid length. [ 892.755966][ T7971] sctp: [Deprecated]: syz.2.9488 (pid 7971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 892.755966][ T7971] Use struct sctp_sack_info instead [ 892.815744][ T7971] netlink: 'syz.2.9488': attribute type 4 has an invalid length. [ 892.849804][ T7970] __nla_validate_parse: 1 callbacks suppressed [ 892.849822][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9489'. [ 892.870766][ T7979] netlink: 'syz.4.9491': attribute type 21 has an invalid length. [ 892.879094][ T7971] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9488'. [ 892.885092][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.943412][ T7979] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9491'. [ 892.955348][ T7971] `: renamed from bond0 (while UP) [ 893.139210][ T7342] veth0_vlan: entered promiscuous mode [ 893.168554][ T7342] veth1_vlan: entered promiscuous mode [ 893.244066][ T7342] veth0_macvtap: entered promiscuous mode [ 893.277043][ T7342] veth1_macvtap: entered promiscuous mode [ 893.319690][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.387347][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.399969][ T8012] xt_hashlimit: size too large, truncated to 1048576 [ 893.471612][ T4968] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.512891][ T4968] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.543729][ T4968] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.597001][ T4968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.634036][ T8020] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9498'. [ 893.712905][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9500'. [ 893.779159][ T8033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9500'. [ 894.015365][ T4971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.040165][ T4971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.131702][ T4969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.159742][ T4969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.369943][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9507'. [ 894.590895][ T8071] netlink: 211024 bytes leftover after parsing attributes in process `syz.2.9509'. [ 894.727081][ T8089] netlink: 576 bytes leftover after parsing attributes in process `syz.0.9510'. [ 897.605079][ T8119] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9513'. [ 897.678266][ T8120] gretap0: entered promiscuous mode [ 898.229252][ T8173] __nla_validate_parse: 1 callbacks suppressed [ 898.229270][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9525'. [ 898.264691][ T8177] netlink: 'syz.4.9527': attribute type 1 has an invalid length. [ 898.343981][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9527'. [ 898.346258][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.389487][ T8177] netlink: 'syz.4.9527': attribute type 1 has an invalid length. [ 898.403275][ T8180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.410501][ T8180] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 898.422373][ T8180] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 898.655524][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9533'. [ 898.711548][ T8206] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 898.788322][ T8217] netlink: 'syz.4.9537': attribute type 1 has an invalid length. [ 898.798657][ T8217] netlink: 'syz.4.9537': attribute type 2 has an invalid length. [ 898.807646][ T8217] netlink: 'syz.4.9537': attribute type 1 has an invalid length. [ 898.819366][ T8217] netlink: 'syz.4.9537': attribute type 2 has an invalid length. [ 898.829007][ T8217] netlink: 'syz.4.9537': attribute type 1 has an invalid length. [ 898.853399][ T8217] netlink: 'syz.4.9537': attribute type 2 has an invalid length. [ 898.886004][ T8217] netlink: 'syz.4.9537': attribute type 1 has an invalid length. [ 898.954706][ T8217] netlink: 'syz.4.9537': attribute type 2 has an invalid length. [ 899.407707][ T8262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9548'. [ 899.553531][ T8269] x_tables: unsorted entry at hook 1 [ 899.573193][ T8273] C: renamed from lo (while UP) [ 899.590710][ T8273] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 900.017916][ T8300] xt_hashlimit: size too large, truncated to 1048576 [ 900.067286][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9563'. [ 900.076151][ T8301] –: renamed from vxcan1 (while UP) [ 900.094256][ T8306] netlink: 165 bytes leftover after parsing attributes in process `syz.1.9562'. [ 900.130828][T16787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.275871][ T11] block nbd4: Possible stuck request ffff888026018000: control (read@0,1024B). Runtime 210 seconds [ 900.277195][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.287620][ T11] block nbd4: Possible stuck request ffff888026018200: control (read@1024,1024B). Runtime 210 seconds [ 900.287681][ T11] block nbd4: Possible stuck request ffff888026018400: control (read@2048,1024B). Runtime 210 seconds [ 900.287706][ T11] block nbd4: Possible stuck request ffff888026018600: control (read@3072,1024B). Runtime 210 seconds [ 900.453670][ T8317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.513441][ T8330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.566708][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.627668][ T8337] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9571'. [ 900.710177][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9573'. [ 900.995071][ T8358] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 901.006474][ T8359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9577'. [ 901.153839][T16804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.164731][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9581'. [ 901.288002][ T8373] bond3 (unregistering): Released all slaves [ 901.475313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.526630][ T8390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 901.965891][ T8424] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 902.027458][ T8424] bond3: option arp_missed_max: invalid value (0) [ 902.038443][ T8424] bond3: option arp_missed_max: allowed values 1 - 255 [ 902.048751][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.067217][ T8424] bond3 (unregistering): Released all slaves [ 902.075141][ T8436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.207500][T16787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.314859][ T8446] block nbd9: server does not support multiple connections per device. [ 902.324422][ T8446] block nbd9: shutting down sockets [ 902.575791][ T8474] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 902.710973][ T8477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.748727][ T8474] team_slave_0: entered promiscuous mode [ 902.754852][ T8474] team_slave_1: entered promiscuous mode [ 902.767042][ T8474] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 902.775451][ T8474] team0: Device macvtap2 is already an upper device of the team interface [ 902.787129][ T8474] team_slave_0: left promiscuous mode [ 902.792665][ T8474] team_slave_1: left promiscuous mode [ 902.853064][ T8481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 902.881664][ T8477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.980708][ T8477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.114764][ T8477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.179296][ T8500] ip6tnl1: entered promiscuous mode [ 903.233391][T16787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.283203][ T8506] ip6t_srh: unknown srh invflags 4000 [ 903.328580][ T4962] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.379426][ T4967] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.442794][ T8518] validate_nla: 125 callbacks suppressed [ 903.442814][ T8518] netlink: 'syz.4.9627': attribute type 10 has an invalid length. [ 903.506153][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.613442][ T8519] bond1: entered allmulticast mode [ 903.618950][ T8519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 903.641613][ T7277] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.654562][ T8518] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 903.673466][ T8518] batman_adv: batadv0: Adding interface: netdevsim0 [ 903.680185][ T8518] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.709663][ T8518] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 903.753143][ T7277] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.954405][ T8539] syzkaller0: entered promiscuous mode [ 903.973958][ T8539] syzkaller0: entered allmulticast mode [ 904.367118][ T8572] __nla_validate_parse: 9 callbacks suppressed [ 904.367135][ T8572] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9644'. [ 904.489020][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9647'. [ 904.510643][ T8585] xfrm1: entered promiscuous mode [ 904.516684][ T8585] xfrm1: entered allmulticast mode [ 904.527690][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9647'. [ 904.569960][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9650'. [ 904.596100][ T8589] nbd: couldn't find a device at index 0 [ 904.692755][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9651'. [ 904.727695][ T8593] bond3: entered promiscuous mode [ 904.733735][ T8593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 905.072916][ T5944] net_ratelimit: 5 callbacks suppressed [ 905.072936][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.323444][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.395849][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.405241][T21390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.523121][ T8647] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9663'. [ 905.825418][ T8662] netlink: 'syz.2.9671': attribute type 1 has an invalid length. [ 905.955468][ T8673] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9674'. [ 905.985944][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9674'. [ 906.354171][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.523823][ T8724] block nbd9: Unsupported socket: should be TCP or UNIX. [ 906.677149][T21390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.888490][ T8745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9691'. [ 907.054303][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9697'. [ 907.168050][ T8769] IPv6: sit1: Disabled Multicast RS [ 907.186825][ T8769] sit1: entered allmulticast mode [ 907.393096][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.450360][ T8788] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 907.473145][ T8788] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 907.688874][ T8809] pim6reg1: entered promiscuous mode [ 907.703094][ T8809] pim6reg1: entered allmulticast mode [ 908.148364][ T8856] netlink: 'syz.2.9724': attribute type 16 has an invalid length. [ 908.326318][ T8870] netlink: 'syz.4.9729': attribute type 1 has an invalid length. [ 908.358456][ T8870] bond1: entered promiscuous mode [ 908.369190][ T8870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 908.403304][ T8872] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 908.420546][ T8872] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 908.430531][ T8872] gretap2: entered promiscuous mode [ 908.437000][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.448318][ T8872] gretap2: entered allmulticast mode [ 908.469322][ T8870] bond1: (slave bridge3): making interface the new active one [ 908.477779][ T8870] bridge3: entered promiscuous mode [ 908.486767][ T8870] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 908.501013][ T8882] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 908.770405][ T8897] bond2: entered promiscuous mode [ 908.776360][ T8897] bond2: entered allmulticast mode [ 908.782862][ T8897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.799901][ T8897] macvlan2: entered promiscuous mode [ 908.807068][ T8897] macvlan2: entered allmulticast mode [ 908.814228][ T8897] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 909.123604][ T8914] netlink: 'syz.4.9747': attribute type 23 has an invalid length. [ 909.473084][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.501435][ T8943] netlink: 'syz.1.9755': attribute type 2 has an invalid length. [ 909.588182][ T8948] __nla_validate_parse: 9 callbacks suppressed [ 909.588198][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9758'. [ 909.712582][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.999974][ T8980] macvtap0: Device is already in use. [ 910.006610][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9768'. [ 910.087439][ T8987] x_tables: duplicate entry at hook 1 [ 910.250641][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9773'. [ 910.419502][ T9010] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 910.446521][ T9013] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 910.448516][ T9012] netlink: 'syz.3.9777': attribute type 11 has an invalid length. [ 910.516177][T16787] net_ratelimit: 1 callbacks suppressed [ 910.516193][T16787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.673924][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9782'. [ 910.712155][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9782'. [ 910.718678][ T9038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9784'. [ 910.745057][ T5944] IPVS: starting estimator thread 0... [ 910.757933][ T9038] netlink: 'syz.1.9784': attribute type 2 has an invalid length. [ 910.768240][ T9038] netlink: 'syz.1.9784': attribute type 2 has an invalid length. [ 910.814421][ T9053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9786'. [ 910.845474][ T9042] IPVS: using max 39 ests per chain, 93600 per kthread [ 910.877236][ T9056] netlink: 'syz.1.9788': attribute type 24 has an invalid length. [ 910.985377][ T9062] syzkaller0: entered promiscuous mode [ 910.995961][ T9062] syzkaller0: entered allmulticast mode [ 911.168757][ T9080] netlink: 'syz.0.9795': attribute type 10 has an invalid length. [ 911.192137][ T9080] veth0_vlan: left promiscuous mode [ 911.198731][ T9080] veth0_vlan: entered promiscuous mode [ 911.207364][ T9080] team0: Device veth0_vlan failed to register rx_handler [ 911.232152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.240709][ T9083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.249079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.257197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.265619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.353364][ T9088] delete_channel: no stack [ 911.361429][ T9087] delete_channel: no stack [ 911.399484][ T9095] netlink: 'syz.3.9798': attribute type 1 has an invalid length. [ 911.459921][ T9094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 911.470122][ T9094] bond1: (slave bond2): making interface the new active one [ 911.478000][ T9094] bond1: (slave bond2): Enslaving as an active interface with an up link [ 911.759929][ T9111] netlink: 'syz.3.9800': attribute type 3 has an invalid length. [ 911.802254][ T9110] netlink: 'syz.3.9800': attribute type 3 has an invalid length. [ 911.873344][ T9119] netlink: 'syz.2.9804': attribute type 30 has an invalid length. [ 911.943279][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.973026][ T9119] bond3: option arp_missed_max: invalid value (0) [ 911.994192][ T9119] bond3: option arp_missed_max: allowed values 1 - 255 [ 912.016374][ T9119] bond3 (unregistering): Released all slaves [ 912.138789][ T9128] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9807'. [ 912.158942][ T9130] syzkaller1: entered promiscuous mode [ 912.168254][ T9130] syzkaller1: entered allmulticast mode [ 912.194117][ T9128] syzkaller0: entered promiscuous mode [ 912.201892][ T9128] syzkaller0: entered allmulticast mode [ 912.209937][ T9137] xt_socket: unknown flags 0x50 [ 912.514422][ T9157] tipc: Enabling of bearer rejected, failed to enable media [ 912.805302][ T9177] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 912.819630][ T9177] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 912.835800][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9823'. [ 913.017563][ T9181] gretap1: entered promiscuous mode [ 913.023700][ T9192] openvswitch: netlink: Flow actions attr not present in new flow. [ 913.034597][ T9181] bond2: (slave gretap1): making interface the new active one [ 913.043201][ T9181] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 913.216624][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9831'. [ 913.389148][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.396542][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.523667][ T9219] syzkaller1: entered promiscuous mode [ 913.541716][ T9219] syzkaller1: entered allmulticast mode [ 914.559453][ T9300] batman_adv: batadv0: Adding interface: dummy0 [ 914.573772][ T9300] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.606729][ T9304] validate_nla: 5 callbacks suppressed [ 914.606747][ T9304] netlink: 'syz.2.9860': attribute type 1 has an invalid length. [ 914.621898][ T9300] batman_adv: batadv0: Interface activated: dummy0 [ 914.684559][ T9309] batadv0: mtu less than device minimum [ 914.700309][ T9309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 914.732761][ T9304] __nla_validate_parse: 11 callbacks suppressed [ 914.732789][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9860'. [ 914.768064][ T9311] bond3: (slave xfrm2): The slave device specified does not support setting the MAC address [ 914.789507][ T9311] bond3: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 914.814220][ T9311] bond3: (slave xfrm2): making interface the new active one [ 914.822939][ T9311] bond3: (slave xfrm2): Enslaving as an active interface with an up link [ 914.835433][ T9304] bond3 (unregistering): (slave xfrm2): Releasing backup interface [ 914.877121][ T9304] bond3 (unregistering): Released all slaves [ 914.968199][ T9318] tc_dump_action: action bad kind [ 914.976762][ T9319] erspan0: entered promiscuous mode [ 914.989240][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9864'. [ 915.310210][ T9342] netlink: 'syz.3.9870': attribute type 3 has an invalid length. [ 915.341385][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9875'. [ 915.363753][ T9342] netlink: 300 bytes leftover after parsing attributes in process `syz.3.9870'. [ 915.394593][ T9353] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9875'. [ 915.487274][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9876'. [ 915.579461][ T9362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9878'. [ 915.756798][ T9372] netlink: 'syz.3.9880': attribute type 1 has an invalid length. [ 915.868344][ T9384] sctp: [Deprecated]: syz.0.9885 (pid 9384) Use of int in maxseg socket option. [ 915.868344][ T9384] Use struct sctp_assoc_value instead [ 915.883757][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 915.888272][ T9372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 915.900324][ T9384] netlink: 'syz.0.9885': attribute type 1 has an invalid length. [ 915.953294][ T9369] bond3: (slave veth3): Enslaving as an active interface with a down link [ 915.969135][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9884'. [ 916.034149][ T9385] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 916.041108][ T9385] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 916.140573][ T9384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 916.169444][ T9390] bond4: (slave ip6erspan0): making interface the new active one [ 916.179382][ T9390] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 916.305026][ T9404] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9890'. [ 916.320433][ T9402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9888'. [ 916.335001][ T9402] netlink: 'syz.1.9888': attribute type 6 has an invalid length. [ 916.347289][ T9402] netlink: 'syz.1.9888': attribute type 5 has an invalid length. [ 916.377209][ T9410] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 916.451402][ T9414] net_ratelimit: 19 callbacks suppressed [ 916.451421][ T9414] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 916.473544][ T9407] openvswitch: netlink: IP tunnel dst address not specified [ 916.566221][ T9418] pim6reg: entered allmulticast mode [ 916.689963][ T9423] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 916.840613][ T9432] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 916.912927][T16797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.968216][ T9437] xfrm1: entered allmulticast mode [ 917.064757][ T9453] syzkaller1: entered promiscuous mode [ 917.070280][ T9453] syzkaller1: entered allmulticast mode [ 917.373539][ T9483] netlink: 'syz.2.9914': attribute type 3 has an invalid length. [ 917.381403][ T9483] netlink: 'syz.2.9914': attribute type 1 has an invalid length. [ 917.395440][ T9483] NCSI netlink: No device for ifindex 813332851 [ 917.436745][ T9489] veth7: entered allmulticast mode [ 917.527290][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.536925][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.547205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.563777][T16797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.825999][ T9518] 8021q: VLANs not supported on nlmon0 [ 918.199964][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.220689][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.236643][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.540924][ T9636] netlink: 'syz.0.9958': attribute type 3 has an invalid length. [ 919.563870][ T9636] netlink: 'syz.0.9958': attribute type 3 has an invalid length. [ 919.876700][ T9659] __nla_validate_parse: 16 callbacks suppressed [ 919.876719][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9965'. [ 920.376642][ T9693] syzkaller0: entered promiscuous mode [ 920.383679][ T9693] syzkaller0: entered allmulticast mode [ 920.439204][ T9693] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 920.473101][ T9693] bond4 (unregistering): Released all slaves [ 920.657305][ T9705] xt_hashlimit: invalid interval [ 920.825027][ T9715] validate_nla: 38 callbacks suppressed [ 920.825046][ T9715] netlink: 'syz.3.9984': attribute type 1 has an invalid length. [ 920.850500][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9984'. [ 920.893966][ T9715] pimreg: entered allmulticast mode [ 920.935227][ T9724] xt_limit: Overflow, try lower: 271964/0 [ 921.000001][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9988'. [ 921.057033][ T9730] netlink: 'syz.3.9990': attribute type 2 has an invalid length. [ 921.224729][ T9742] netlink: 'syz.1.9995': attribute type 1 has an invalid length. [ 921.321704][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9996'. [ 921.364321][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9996'. [ 921.373019][ T9755] tipc: Enabled bearer , priority 0 [ 921.467665][ T9755] syzkaller0: entered promiscuous mode [ 921.491923][ T9755] syzkaller0: entered allmulticast mode [ 921.508632][ T9755] tipc: Resetting bearer [ 921.609150][ T9773] xt_hashlimit: size too large, truncated to 1048576 [ 921.636318][ T9754] tipc: Resetting bearer [ 921.702197][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10003'. [ 921.880120][ T9786] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10001'. [ 923.317983][T19593] net_ratelimit: 9 callbacks suppressed [ 923.318003][T19593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.703135][ T9754] tipc: Disabling bearer [ 923.734827][T29870] tipc: Node number set to 1962661433 [ 923.973567][ T9818] gtp0: entered promiscuous mode [ 923.978562][ T9818] gtp0: entered allmulticast mode [ 924.368737][ T9848] gre0: entered promiscuous mode [ 924.384548][ T9848] gre0: entered allmulticast mode [ 924.402620][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10018'. [ 924.422728][ T9848] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10018'. [ 924.473797][ T9854] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10018'. [ 924.593236][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.036569][ T9884] syzkaller0: entered promiscuous mode [ 925.052405][ T9884] syzkaller0: entered allmulticast mode [ 925.100509][ T9896] __nla_validate_parse: 2 callbacks suppressed [ 925.100527][ T9896] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10027'. [ 925.100889][ T9884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.108932][ T9896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10027'. [ 925.363120][ T9909] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 925.424111][ T9912] netlink: 'syz.0.10030': attribute type 83 has an invalid length. [ 925.457092][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10033'. [ 925.497091][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10033'. [ 925.554340][ T9914] netlink: 284 bytes leftover after parsing attributes in process `syz.2.10033'. [ 925.792614][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.805285][T19593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.813214][ T9954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10040'. [ 925.814921][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.879004][ T9959] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 926.164574][ T9974] bond0: (slave gre0): Error: Device type is different from other slaves [ 926.255663][ T9986] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 926.352917][T21390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.418056][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10052'. [ 926.444174][ T9998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10052'. [ 926.444333][ T9993] syzkaller1: entered promiscuous mode [ 926.473490][ T9993] syzkaller1: entered allmulticast mode [ 926.491175][ T9993] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 926.513146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.526635][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10053'. [ 926.947785][T10036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10062'. [ 927.302722][T10068] netlink: 'syz.4.10073': attribute type 4 has an invalid length. [ 927.538833][T10092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.539091][T10090] bridge5: entered promiscuous mode [ 927.587715][T10090] bridge5: entered allmulticast mode [ 928.116789][T10130] tipc: MTU too low for tipc bearer [ 928.230235][T10141] netlink: 'syz.0.10090': attribute type 61 has an invalid length. [ 928.352197][ C0] net_ratelimit: 369 callbacks suppressed [ 928.352215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.799720][T10181] syz.3.10105: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 928.816001][T10181] CPU: 1 UID: 0 PID: 10181 Comm: syz.3.10105 Not tainted syzkaller #0 PREEMPT(full) [ 928.816018][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 928.816026][T10181] Call Trace: [ 928.816031][T10181] [ 928.816036][T10181] dump_stack_lvl+0xe8/0x150 [ 928.816056][T10181] warn_alloc+0x249/0x340 [ 928.816069][T10181] ? stack_trace_save+0xa9/0x100 [ 928.816087][T10181] ? __pfx_warn_alloc+0x10/0x10 [ 928.816102][T10181] ? kasan_save_track+0x4f/0x80 [ 928.816112][T10181] ? kasan_save_track+0x3e/0x80 [ 928.816121][T10181] ? __kasan_kmalloc+0x93/0xb0 [ 928.816131][T10181] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 928.816141][T10181] ? xskq_create+0x56/0x170 [ 928.816154][T10181] ? xsk_setsockopt+0x54c/0x990 [ 928.816164][T10181] ? do_sock_setsockopt+0x17c/0x1b0 [ 928.816179][T10181] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 928.816193][T10181] ? do_syscall_64+0xe2/0xf80 [ 928.816209][T10181] __vmalloc_node_range_noprof+0x132/0x1730 [ 928.816236][T10181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 928.816250][T10181] ? __kasan_kmalloc+0x93/0xb0 [ 928.816264][T10181] vmalloc_user_noprof+0xad/0xe0 [ 928.816276][T10181] ? xskq_create+0xbf/0x170 [ 928.816288][T10181] xskq_create+0xbf/0x170 [ 928.816302][T10181] xsk_init_queue+0xad/0x110 [ 928.816316][T10181] xsk_setsockopt+0x54c/0x990 [ 928.816329][T10181] ? __pfx_xsk_setsockopt+0x10/0x10 [ 928.816341][T10181] ? __pfx_aa_sk_perm+0x10/0x10 [ 928.816357][T10181] ? aa_sock_opt_perm+0xff/0x1a0 [ 928.816381][T10181] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 928.816397][T10181] ? __pfx_xsk_setsockopt+0x10/0x10 [ 928.816419][T10181] do_sock_setsockopt+0x17c/0x1b0 [ 928.816450][T10181] __x64_sys_setsockopt+0x13d/0x1b0 [ 928.816483][T10181] do_syscall_64+0xe2/0xf80 [ 928.816510][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.816530][T10181] ? clear_bhb_loop+0x60/0xb0 [ 928.816554][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.816573][T10181] RIP: 0033:0x7fd2a679acb9 [ 928.816588][T10181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.816598][T10181] RSP: 002b:00007fd2a769b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 928.816610][T10181] RAX: ffffffffffffffda RBX: 00007fd2a6a15fa0 RCX: 00007fd2a679acb9 [ 928.816619][T10181] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 928.816626][T10181] RBP: 00007fd2a6808bf7 R08: 0000000000000004 R09: 0000000000000000 [ 928.816632][T10181] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.816639][T10181] R13: 00007fd2a6a16038 R14: 00007fd2a6a15fa0 R15: 00007fffe89211a8 [ 928.816656][T10181] [ 928.816662][T10181] Mem-Info: [ 929.106873][T10181] active_anon:6343 inactive_anon:0 isolated_anon:0 [ 929.106873][T10181] active_file:3269 inactive_file:40254 isolated_file:0 [ 929.106873][T10181] unevictable:768 dirty:106 writeback:0 [ 929.106873][T10181] slab_reclaimable:13688 slab_unreclaimable:139391 [ 929.106873][T10181] mapped:30449 shmem:1375 pagetables:1463 [ 929.106873][T10181] sec_pagetables:0 bounce:0 [ 929.106873][T10181] kernel_misc_reclaimable:0 [ 929.106873][T10181] free:1268841 free_pcp:13473 free_cma:0 [ 929.153829][T10181] Node 0 active_anon:25372kB inactive_anon:0kB active_file:13076kB inactive_file:160812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121796kB dirty:424kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17424kB pagetables:5696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 929.192665][T10181] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 929.223572][T10181] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.274056][T10181] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 929.279884][T10181] Node 0 DMA32 free:1164376kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25472kB inactive_anon:0kB active_file:13076kB inactive_file:160812kB unevictable:1536kB writepending:424kB zspages:0kB present:3129332kB managed:2555788kB mlocked:0kB bounce:0kB free_pcp:42652kB local_pcp:21432kB free_cma:0kB [ 929.322532][T10181] lowmem_reserve[]: 0 0 1 1 1 [ 929.332564][T10181] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.393223][T19593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.399898][T10181] lowmem_reserve[]: 0 0 0 0 0 [ 929.413279][T10181] Node 1 Normal free:3895428kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11696kB local_pcp:8708kB free_cma:0kB [ 929.522581][T10181] lowmem_reserve[]: 0 0 0 0 0 [ 929.527532][T10181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 929.572351][T10181] Node 0 DMA32: 9799*4kB (UME) 7927*8kB (UME) 3451*16kB (UME) 424*32kB (UME) 298*64kB (UME) 185*128kB (UME) 290*256kB (UME) 264*512kB (UME) 186*1024kB (UM) 65*2048kB (UM) 102*4096kB (UM) = 1164932kB [ 929.709650][T10204] gtp0: entered promiscuous mode [ 929.725533][T10181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 929.742392][T10205] netlink: 'syz.0.10113': attribute type 7 has an invalid length. [ 929.750564][T10181] Node 1 Normal: 3*4kB (UME) 25*8kB (UME) 59*16kB (UME) 236*32kB (UME) 76*64kB (UME) 13*128kB (UME) 3*256kB (ME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3895428kB [ 929.777237][T10181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.791320][T10181] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 929.802642][T10181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.813600][T10181] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 929.843166][T10181] 44894 total pagecache pages [ 929.853845][T10181] 0 pages in swap cache [ 929.862281][T10181] Free swap = 124996kB [ 929.883308][T10181] Total swap = 124996kB [ 929.887507][T10181] 2097051 pages RAM [ 929.897735][T10181] 0 pages HighMem/MovableOnly [ 929.903572][T10181] 426142 pages reserved [ 929.908092][T10181] 0 pages cma reserved [ 930.009666][T10220] ksmbd: Unknown IPC event: 3, ignore. [ 930.092836][T10228] mac80211_hwsim hwsim102 wlan0: entered promiscuous mode [ 930.126712][T10233] __nla_validate_parse: 13 callbacks suppressed [ 930.126729][T10233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10120'. [ 930.135981][T10235] netlink: 'syz.3.10123': attribute type 11 has an invalid length. [ 930.143405][T10232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10120'. [ 930.235956][T10237] syzkaller0: entered promiscuous mode [ 930.245950][T10237] syzkaller0: entered allmulticast mode [ 930.285166][T10241] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10127'. [ 930.296838][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.307964][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10126'. [ 930.338903][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10127'. [ 930.359038][ T11] block nbd4: Possible stuck request ffff888026018000: control (read@0,1024B). Runtime 240 seconds [ 930.370202][ T11] block nbd4: Possible stuck request ffff888026018200: control (read@1024,1024B). Runtime 240 seconds [ 930.381385][ T11] block nbd4: Possible stuck request ffff888026018400: control (read@2048,1024B). Runtime 240 seconds [ 930.385435][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10126'. [ 930.395055][ T11] block nbd4: Possible stuck request ffff888026018600: control (read@3072,1024B). Runtime 240 seconds [ 930.559786][T10257] netlink: 348 bytes leftover after parsing attributes in process `syz.2.10130'. [ 930.680160][T10270] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10132'. [ 930.715829][ T7274] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.738797][ T7274] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.760948][ T7274] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.788983][ T7274] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.795403][T10278] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 930.995919][ T4959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.006767][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.019022][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.027189][T16787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.126704][T10303] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10145'. [ 931.233972][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10148'. [ 931.317648][T10307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 931.368590][T10310] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 931.607141][T10332] netlink: 'syz.4.10155': attribute type 2 has an invalid length. [ 931.643483][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.998430][T10359] syzkaller0: entered promiscuous mode [ 932.013399][T10359] syzkaller0: entered allmulticast mode [ 932.046384][T10361] netlink: 'syz.2.10166': attribute type 10 has an invalid length. [ 932.135566][T10361] team0: Device veth0_macvtap failed to register rx_handler [ 932.286516][T10373] netlink: 'syz.1.10169': attribute type 22 has an invalid length. [ 932.347743][T10373] netlink: 'syz.1.10169': attribute type 22 has an invalid length. [ 932.692286][ T6348] Bluetooth: hci1: link tx timeout [ 932.698102][ T6348] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 932.839819][T10421] bridge_slave_1: left allmulticast mode [ 932.845960][T10421] bridge_slave_1: left promiscuous mode [ 932.862152][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.884107][T10421] bridge_slave_0: left allmulticast mode [ 932.889786][T10421] bridge_slave_0: left promiscuous mode [ 932.906161][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.065605][T10439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.160200][T10446] netlink: 'syz.0.10190': attribute type 10 has an invalid length. [ 933.174144][T10445] xt_bpf: check failed: parse error [ 933.435597][T10460] netlink: 'syz.0.10196': attribute type 13 has an invalid length. [ 933.465078][T10460] veth0_macvtap: left promiscuous mode [ 933.492985][T10460] macvtap0: entered allmulticast mode [ 933.530896][T10460] macvtap0: refused to change device tx_queue_len [ 933.602093][T10469] xfrm1: entered promiscuous mode [ 933.615693][T10469] xfrm1: entered allmulticast mode [ 933.712075][ C1] net_ratelimit: 2 callbacks suppressed [ 933.712096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.808249][T10481] sctp: [Deprecated]: syz.3.10200 (pid 10481) Use of int in max_burst socket option deprecated. [ 933.808249][T10481] Use struct sctp_assoc_value instead [ 933.896388][ T4971] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.918313][ T4971] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.942766][ T4971] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.964899][ T4971] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.987472][T10489] tipc: Enabling of bearer rejected, failed to enable media [ 934.113744][T19593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.212094][T10508] bond0: (slave gre0): Error: Device type is different from other slaves [ 934.289743][T10514] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 934.329446][T10514] bridge_slave_1: left allmulticast mode [ 934.349310][T10514] bridge_slave_1: left promiscuous mode [ 934.375455][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.433215][T10514] bridge_slave_0: left allmulticast mode [ 934.457934][T10514] bridge_slave_0: left promiscuous mode [ 934.469273][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.754656][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 935.399322][T10591] netlink: 'syz.3.10232': attribute type 20 has an invalid length. [ 935.409507][T10591] __nla_validate_parse: 15 callbacks suppressed [ 935.409524][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10232'. [ 935.627335][T10604] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10235'. [ 936.109161][T10635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.300728][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10246'. [ 936.406605][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10246'. [ 936.740437][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10255'. [ 936.755952][ T7272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.765446][T19593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.776575][T21390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.912333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.003686][T10703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10262'. [ 937.013549][T10703] tipc: Invalid UDP bearer configuration [ 937.013603][T10703] tipc: Enabling of bearer rejected, failed to enable media [ 937.153580][T19593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.675790][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.036724][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10269'. [ 939.065294][T10746] veth0: entered promiscuous mode [ 939.145018][T10755] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10272'. [ 939.396619][T10769] netlink: 'syz.0.10276': attribute type 1 has an invalid length. [ 939.471717][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10278'. [ 939.618385][T10788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.639648][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10281'. [ 939.682245][T10790] netlink: 'syz.3.10281': attribute type 14 has an invalid length. [ 939.690187][T10790] netlink: 'syz.3.10281': attribute type 13 has an invalid length. [ 939.775279][T10799] team_slave_0: entered promiscuous mode [ 939.780991][T10799] team_slave_1: entered promiscuous mode [ 939.839458][T10799] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 939.868264][T10799] team0: Device macvtap1 is already an upper device of the team interface [ 939.886706][T10799] team_slave_0: left promiscuous mode [ 939.892243][T10799] team_slave_1: left promiscuous mode [ 940.195343][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.306981][T10834] netlink: 'syz.2.10291': attribute type 8 has an invalid length. [ 940.492667][T16806] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 940.502541][T10855] __nla_validate_parse: 7 callbacks suppressed [ 940.502557][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10296'. [ 940.504021][T10853] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10295'. [ 940.585191][T10861] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 940.634731][T10855] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 940.812102][T16806] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 940.997671][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10305'. [ 941.038938][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10305'. [ 941.198027][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10303'. [ 941.275665][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10303'. [ 941.322661][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10303'. [ 941.379682][T10877] bond5: entered promiscuous mode [ 941.385569][T10877] 8021q: adding VLAN 0 to HW filter on device bond5 [ 941.429867][T10893] bond5: (slave xfrm3): refused to change device type [ 941.499691][T10921] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10312'. [ 941.673771][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10315'. [ 941.817238][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10317'. [ 941.893694][T10945] ip6_vti0: entered promiscuous mode [ 942.272088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.287469][T10950] syzkaller1: entered promiscuous mode [ 942.314011][T10950] syzkaller1: entered allmulticast mode [ 942.446980][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.749135][ T4962] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.881676][T10993] macsec2: entered promiscuous mode [ 942.902732][T10993] macsec2: entered allmulticast mode [ 942.908992][T10993] bond4: (slave macsec2): Error -34 calling dev_set_mtu [ 942.991328][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.012542][T11001] batadv0: mtu less than device minimum [ 943.019485][T11001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 943.031618][T11001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 943.043174][T11001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 943.184585][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.597939][T11037] netlink: 'syz.4.10345': attribute type 4 has an invalid length. [ 943.614973][T11037] netlink: 'syz.4.10345': attribute type 4 has an invalid length. [ 943.808174][T11049] netlink: 'syz.1.10348': attribute type 1 has an invalid length. [ 943.947176][T11049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 943.994993][T11060] bond3: (slave gretap3): making interface the new active one [ 944.035672][T11060] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 944.078016][T11065] syzkaller0: entered promiscuous mode [ 944.084982][T11065] syzkaller0: entered allmulticast mode [ 944.254480][T11065] [ 944.256855][T11065] ====================================================== [ 944.263863][T11065] WARNING: possible circular locking dependency detected [ 944.270896][T11065] syzkaller #0 Not tainted [ 944.275293][T11065] ------------------------------------------------------ [ 944.282292][T11065] syz.4.10351/11065 is trying to acquire lock: [ 944.288419][T11065] ffff888142b88f28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 944.297819][T11065] [ 944.297819][T11065] but task is already holding lock: [ 944.305258][T11065] ffff888142b889e8 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 944.315436][T11065] [ 944.315436][T11065] which lock already depends on the new lock. [ 944.315436][T11065] [ 944.325826][T11065] [ 944.325826][T11065] the existing dependency chain (in reverse order) is: [ 944.334826][T11065] [ 944.334826][T11065] -> #6 (&q->q_usage_counter(io)#58){++++}-{0:0}: [ 944.343416][T11065] blk_alloc_queue+0x52f/0x610 [ 944.348690][T11065] __blk_mq_alloc_disk+0x197/0x390 [ 944.354308][T11065] nbd_dev_add+0x499/0xb50 [ 944.359264][T11065] nbd_init+0x168/0x1f0 [ 944.363943][T11065] do_one_initcall+0x250/0x840 [ 944.369220][T11065] do_initcall_level+0x104/0x190 [ 944.374675][T11065] do_initcalls+0x59/0xa0 [ 944.379518][T11065] kernel_init_freeable+0x2a6/0x3d0 [ 944.385227][T11065] kernel_init+0x1d/0x1d0 [ 944.390073][T11065] ret_from_fork+0x51b/0xa40 [ 944.395269][T11065] ret_from_fork_asm+0x1a/0x30 [ 944.400545][T11065] [ 944.400545][T11065] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 944.407747][T11065] fs_reclaim_acquire+0x71/0x100 [ 944.413198][T11065] kmem_cache_alloc_node_noprof+0x48/0x6f0 [ 944.419516][T11065] __alloc_skb+0x1d7/0x390 [ 944.424443][T11065] tcp_stream_alloc_skb+0x3d/0x350 [ 944.430062][T11065] tcp_sendmsg_locked+0x1af1/0x55b0 [ 944.435764][T11065] tcp_sendmsg+0x2f/0x50 [ 944.440512][T11065] __sock_sendmsg+0x19c/0x270 [ 944.445698][T11065] sock_write_iter+0x29e/0x3a0 [ 944.450968][T11065] vfs_write+0x61d/0xb90 [ 944.455715][T11065] ksys_write+0x150/0x270 [ 944.460552][T11065] do_syscall_64+0xe2/0xf80 [ 944.465572][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.471972][T11065] [ 944.471972][T11065] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 944.479602][T11065] lock_sock_nested+0x48/0x100 [ 944.484875][T11065] inet_shutdown+0x6a/0x390 [ 944.489884][T11065] nbd_mark_nsock_dead+0x2e9/0x560 [ 944.495512][T11065] recv_work+0x1bf4/0x1d00 [ 944.500464][T11065] process_scheduled_works+0xaec/0x17a0 [ 944.506514][T11065] worker_thread+0x89f/0xd90 [ 944.511698][T11065] kthread+0x726/0x8b0 [ 944.516276][T11065] ret_from_fork+0x51b/0xa40 [ 944.521396][T11065] ret_from_fork_asm+0x1a/0x30 [ 944.526675][T11065] [ 944.526675][T11065] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 944.534305][T11065] __mutex_lock+0x19f/0x1300 [ 944.539408][T11065] nbd_queue_rq+0x255/0xf40 [ 944.544436][T11065] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 944.550491][T11065] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 944.557327][T11065] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 944.563821][T11065] blk_mq_run_hw_queue+0x348/0x4f0 [ 944.569441][T11065] blk_mq_dispatch_list+0xd16/0xe10 [ 944.575146][T11065] blk_mq_flush_plug_list+0x48d/0x570 [ 944.581023][T11065] __blk_flush_plug+0x3ed/0x4d0 [ 944.586377][T11065] __submit_bio+0x4c6/0x5d0 [ 944.591469][T11065] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 944.597697][T11065] block_read_full_folio+0x599/0x830 [ 944.603935][T11065] filemap_read_folio+0x137/0x3b0 [ 944.609489][T11065] do_read_cache_folio+0x358/0x590 [ 944.615105][T11065] read_part_sector+0xb6/0x2b0 [ 944.620374][T11065] adfspart_check_ICS+0xa5/0xa40 [ 944.625820][T11065] bdev_disk_changed+0x765/0x14c0 [ 944.631346][T11065] blkdev_get_whole+0x380/0x510 [ 944.636704][T11065] bdev_open+0x31e/0xd30 [ 944.641451][T11065] blkdev_open+0x470/0x610 [ 944.646896][T11065] do_dentry_open+0x7ce/0x1420 [ 944.652172][T11065] vfs_open+0x3b/0x340 [ 944.656753][T11065] path_openat+0x3486/0x3e20 [ 944.661842][T11065] do_filp_open+0x22d/0x490 [ 944.666844][T11065] do_sys_openat2+0x12f/0x220 [ 944.672025][T11065] __x64_sys_openat+0x138/0x170 [ 944.677389][T11065] do_syscall_64+0xe2/0xf80 [ 944.682402][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.688801][T11065] [ 944.688801][T11065] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 944.695999][T11065] __mutex_lock+0x19f/0x1300 [ 944.701099][T11065] nbd_queue_rq+0xc6/0xf40 [ 944.706027][T11065] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 944.712079][T11065] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 944.718925][T11065] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 944.725408][T11065] blk_mq_run_hw_queue+0x348/0x4f0 [ 944.731024][T11065] blk_mq_dispatch_list+0xd16/0xe10 [ 944.736724][T11065] blk_mq_flush_plug_list+0x48d/0x570 [ 944.742597][T11065] __blk_flush_plug+0x3ed/0x4d0 [ 944.747962][T11065] __submit_bio+0x4c6/0x5d0 [ 944.752993][T11065] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 944.759143][T11065] block_read_full_folio+0x599/0x830 [ 944.764977][T11065] filemap_read_folio+0x137/0x3b0 [ 944.770511][T11065] do_read_cache_folio+0x358/0x590 [ 944.776132][T11065] read_part_sector+0xb6/0x2b0 [ 944.781401][T11065] adfspart_check_ICS+0xa5/0xa40 [ 944.786844][T11065] bdev_disk_changed+0x765/0x14c0 [ 944.792381][T11065] blkdev_get_whole+0x380/0x510 [ 944.797740][T11065] bdev_open+0x31e/0xd30 [ 944.802490][T11065] blkdev_open+0x470/0x610 [ 944.807415][T11065] do_dentry_open+0x7ce/0x1420 [ 944.812685][T11065] vfs_open+0x3b/0x340 [ 944.817259][T11065] path_openat+0x3486/0x3e20 [ 944.822352][T11065] do_filp_open+0x22d/0x490 [ 944.827357][T11065] do_sys_openat2+0x12f/0x220 [ 944.832539][T11065] __x64_sys_openat+0x138/0x170 [ 944.837899][T11065] do_syscall_64+0xe2/0xf80 [ 944.842914][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.849312][T11065] [ 944.849312][T11065] -> #1 (set->srcu){.+.+}-{0:0}: [ 944.856443][T11065] __synchronize_srcu+0xca/0x3e0 [ 944.861896][T11065] elevator_switch+0x12b/0x5f0 [ 944.867200][T11065] elevator_change+0x2cc/0x450 [ 944.872468][T11065] elevator_set_default+0x1cc/0x2e0 [ 944.878174][T11065] blk_register_queue+0x34e/0x3f0 [ 944.883722][T11065] __add_disk+0x677/0xd50 [ 944.888558][T11065] add_disk_fwnode+0xfb/0x480 [ 944.893789][T11065] nbd_dev_add+0x72c/0xb50 [ 944.898736][T11065] nbd_init+0x168/0x1f0 [ 944.903406][T11065] do_one_initcall+0x250/0x840 [ 944.908691][T11065] do_initcall_level+0x104/0x190 [ 944.914237][T11065] do_initcalls+0x59/0xa0 [ 944.919077][T11065] kernel_init_freeable+0x2a6/0x3d0 [ 944.924871][T11065] kernel_init+0x1d/0x1d0 [ 944.930492][T11065] ret_from_fork+0x51b/0xa40 [ 944.935605][T11065] ret_from_fork_asm+0x1a/0x30 [ 944.940878][T11065] [ 944.940878][T11065] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 944.948684][T11065] __lock_acquire+0x15a5/0x2cf0 [ 944.954046][T11065] lock_acquire+0x106/0x330 [ 944.959066][T11065] __mutex_lock+0x19f/0x1300 [ 944.964171][T11065] elevator_change+0x1b3/0x450 [ 944.969442][T11065] elevator_set_none+0xb5/0x140 [ 944.974972][T11065] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 944.981286][T11065] nbd_start_device+0x17f/0xb10 [ 944.986662][T11065] nbd_genl_connect+0x149d/0x1a90 [ 944.992301][T11065] genl_family_rcv_msg_doit+0x22a/0x330 [ 944.998354][T11065] genl_rcv_msg+0x61c/0x7a0 [ 945.003369][T11065] netlink_rcv_skb+0x232/0x4b0 [ 945.008637][T11065] genl_rcv+0x28/0x40 [ 945.013123][T11065] netlink_unicast+0x80f/0x9b0 [ 945.018394][T11065] netlink_sendmsg+0x813/0xb40 [ 945.023660][T11065] __sock_sendmsg+0x21c/0x270 [ 945.028845][T11065] ____sys_sendmsg+0x4d7/0x810 [ 945.034114][T11065] ___sys_sendmsg+0x2a5/0x360 [ 945.039290][T11065] __x64_sys_sendmsg+0x1bd/0x2a0 [ 945.044729][T11065] do_syscall_64+0xe2/0xf80 [ 945.049741][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.056146][T11065] [ 945.056146][T11065] other info that might help us debug this: [ 945.056146][T11065] [ 945.066360][T11065] Chain exists of: [ 945.066360][T11065] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#58 [ 945.066360][T11065] [ 945.080079][T11065] Possible unsafe locking scenario: [ 945.080079][T11065] [ 945.087509][T11065] CPU0 CPU1 [ 945.092862][T11065] ---- ---- [ 945.098212][T11065] lock(&q->q_usage_counter(io)#58); [ 945.103580][T11065] lock(fs_reclaim); [ 945.110072][T11065] lock(&q->q_usage_counter(io)#58); [ 945.117954][T11065] lock(&q->elevator_lock); [ 945.122532][T11065] [ 945.122532][T11065] *** DEADLOCK *** [ 945.122532][T11065] [ 945.130652][T11065] 6 locks held by syz.4.10351/11065: [ 945.135914][T11065] #0: ffffffff8f816810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 945.144089][T11065] #1: ffffffff8f816628 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 945.153044][T11065] #2: ffff88802605a1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 945.164429][T11065] #3: ffff88802605a0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 945.175383][T11065] #4: ffff888142b889e8 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 945.186011][T11065] #5: ffff888142b88a20 (&q->q_usage_counter(queue)#42){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 945.196877][T11065] [ 945.196877][T11065] stack backtrace: [ 945.202746][T11065] CPU: 1 UID: 0 PID: 11065 Comm: syz.4.10351 Not tainted syzkaller #0 PREEMPT(full) [ 945.202765][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 945.202775][T11065] Call Trace: [ 945.202783][T11065] [ 945.202790][T11065] dump_stack_lvl+0xe8/0x150 [ 945.202811][T11065] print_circular_bug+0x2e1/0x300 [ 945.202832][T11065] check_noncircular+0x12e/0x150 [ 945.202853][T11065] __lock_acquire+0x15a5/0x2cf0 [ 945.202877][T11065] ? elevator_change+0x1b3/0x450 [ 945.202893][T11065] lock_acquire+0x106/0x330 [ 945.202907][T11065] ? elevator_change+0x1b3/0x450 [ 945.202928][T11065] __mutex_lock+0x19f/0x1300 [ 945.202950][T11065] ? elevator_change+0x1b3/0x450 [ 945.202967][T11065] ? __timer_delete+0x5d/0x390 [ 945.202981][T11065] ? rcu_is_watching+0x15/0xb0 [ 945.203000][T11065] ? elevator_change+0x1b3/0x450 [ 945.203017][T11065] ? __pfx___mutex_lock+0x10/0x10 [ 945.203037][T11065] ? enable_work+0x16b/0x220 [ 945.203056][T11065] ? lockdep_hardirqs_on+0x7a/0x110 [ 945.203078][T11065] ? __cancel_work_sync+0xf7/0x110 [ 945.203096][T11065] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 945.203116][T11065] elevator_change+0x1b3/0x450 [ 945.203135][T11065] elevator_set_none+0xb5/0x140 [ 945.203152][T11065] ? __pfx_elevator_set_none+0x10/0x10 [ 945.203170][T11065] ? xa_load+0x1db/0x210 [ 945.203193][T11065] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 945.203218][T11065] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 945.203239][T11065] ? kernfs_add_one+0x46f/0x5c0 [ 945.203256][T11065] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 945.203279][T11065] ? sysfs_add_file_mode_ns+0x259/0x300 [ 945.203304][T11065] nbd_start_device+0x17f/0xb10 [ 945.203327][T11065] ? device_create_file+0xf4/0x1b0 [ 945.203349][T11065] nbd_genl_connect+0x149d/0x1a90 [ 945.203372][T11065] ? __pfx_nbd_genl_connect+0x10/0x10 [ 945.203393][T11065] ? rcu_is_watching+0x15/0xb0 [ 945.203412][T11065] ? __nla_parse+0x40/0x60 [ 945.203427][T11065] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 945.203451][T11065] genl_family_rcv_msg_doit+0x22a/0x330 [ 945.203473][T11065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 945.203501][T11065] ? __lock_acquire+0x6b5/0x2cf0 [ 945.203520][T11065] genl_rcv_msg+0x61c/0x7a0 [ 945.203541][T11065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 945.203559][T11065] ? __pfx_nbd_genl_connect+0x10/0x10 [ 945.203584][T11065] netlink_rcv_skb+0x232/0x4b0 [ 945.203599][T11065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 945.203618][T11065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 945.203632][T11065] ? genl_rcv+0x19/0x40 [ 945.203655][T11065] ? down_read+0x272/0x2e0 [ 945.203668][T11065] ? genl_rcv+0xd/0x40 [ 945.203685][T11065] genl_rcv+0x28/0x40 [ 945.203703][T11065] netlink_unicast+0x80f/0x9b0 [ 945.203727][T11065] ? __pfx_netlink_unicast+0x10/0x10 [ 945.203749][T11065] ? __alloc_skb+0x193/0x390 [ 945.203770][T11065] ? netlink_sendmsg+0x650/0xb40 [ 945.203784][T11065] ? skb_put+0x11b/0x210 [ 945.203806][T11065] netlink_sendmsg+0x813/0xb40 [ 945.203821][T11065] ? rcu_is_watching+0x15/0xb0 [ 945.203841][T11065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.203858][T11065] ? aa_sock_msg_perm+0xf1/0x1b0 [ 945.203878][T11065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 945.203892][T11065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.203908][T11065] __sock_sendmsg+0x21c/0x270 [ 945.203927][T11065] ____sys_sendmsg+0x4d7/0x810 [ 945.203941][T11065] ? __might_fault+0xaf/0x130 [ 945.203964][T11065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.203981][T11065] ? import_iovec+0x73/0xa0 [ 945.203998][T11065] ___sys_sendmsg+0x2a5/0x360 [ 945.204012][T11065] ? __lock_acquire+0x6b5/0x2cf0 [ 945.204028][T11065] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.204044][T11065] ? futex_wake+0x4ac/0x580 [ 945.204071][T11065] ? __fget_files+0x2a/0x420 [ 945.204089][T11065] ? __fget_files+0x3a0/0x420 [ 945.204110][T11065] __x64_sys_sendmsg+0x1bd/0x2a0 [ 945.204124][T11065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.204142][T11065] ? rcu_is_watching+0x15/0xb0 [ 945.204164][T11065] do_syscall_64+0xe2/0xf80 [ 945.204184][T11065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.204199][T11065] ? trace_irq_disable+0x37/0x100 [ 945.204218][T11065] ? clear_bhb_loop+0x60/0xb0 [ 945.204234][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.204249][T11065] RIP: 0033:0x7f480119acb9 [ 945.204264][T11065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.204278][T11065] RSP: 002b:00007f480201f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.204294][T11065] RAX: ffffffffffffffda RBX: 00007f4801415fa0 RCX: 00007f480119acb9 [ 945.204305][T11065] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 945.204315][T11065] RBP: 00007f4801208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 945.204326][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.204335][T11065] R13: 00007f4801416038 R14: 00007f4801415fa0 R15: 00007ffc86754448 [ 945.204353][T11065] [ 945.652049][ C0] net_ratelimit: 19 callbacks suppressed [ 945.652066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.694123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.703296][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.722107][T16804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.731222][T11082] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 945.808367][ T6348] block nbd9: Receive control failed (result -32) [ 945.815690][ T6348] block nbd9: Receive control failed (result -32) [ 945.822692][ T5834] block nbd9: Receive control failed (result -32) [ 945.852723][T11065] nbd9: detected capacity change from 0 to 127 [ 945.860623][T11078] __nla_validate_parse: 8 callbacks suppressed [ 945.860640][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10355'. [ 945.877951][ T2267] block nbd9: Dead connection, failed to find a fallback [ 945.891334][ T2267] block nbd9: shutting down sockets [ 945.896977][ T2267] blk_print_req_error: 138 callbacks suppressed [ 945.896991][ T2267] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.913502][ T2267] buffer_io_error: 138 callbacks suppressed [ 945.913520][ T2267] Buffer I/O error on dev nbd9, logical block 0, async page read [ 945.914640][T11074] caif:caif_disconnect_client(): nothing to disconnect [ 945.919489][ T2267] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.954738][ T2267] Buffer I/O error on dev nbd9, logical block 1, async page read [ 945.962833][ T2267] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.972356][ T2267] Buffer I/O error on dev nbd9, logical block 2, async page read [ 945.980410][ T2267] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.989956][ T2267] Buffer I/O error on dev nbd9, logical block 3, async page read [ 945.999313][ T2267] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.008887][ T2267] Buffer I/O error on dev nbd9, logical block 0, async page read [ 946.017837][ T2267] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.027614][ T2267] Buffer I/O error on dev nbd9, logical block 1, async page read [ 946.035726][ T2267] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.045305][ T2267] Buffer I/O error on dev nbd9, logical block 2, async page read [ 946.053256][ T2267] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.062742][ T2267] Buffer I/O error on dev nbd9, logical block 3, async page read [ 946.070511][ T2267] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.080357][ T2267] Buffer I/O error on dev nbd9, logical block 0, async page read [ 946.088278][ T2267] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.097761][ T2267] Buffer I/O error on dev nbd9, logical block 1, async page read [ 946.107368][ T2267] ldm_validate_partition_table(): Disk read failed. [ 946.114632][ T2267] Dev nbd9: unable to read RDB block 0 [ 946.120330][ T2267] nbd9: unable to read partition table [ 946.128590][ T2267] ldm_validate_partition_table(): Disk read failed. [ 946.135424][ T2267] Dev nbd9: unable to read RDB block 0 [ 946.141118][ T2267] nbd9: unable to read partition table [ 946.352704][T21390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.762618][T21390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.832024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.840460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.848857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.552520][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.792417][ T5892] net_ratelimit: 1 callbacks suppressed [ 951.792430][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.753155][T16800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog