last executing test programs: 13m32.428972251s ago: executing program 1 (id=5584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000001ec0)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="17f2b2de5c6b0db5d25446463f74d3740a70f6e0249ca79ea3579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070040000003d478881c92de1d95dcc82811ba3e4d049aa7057", 0x50}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x4, 0xfd, 0x5}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x6, 0x8, 0x1, 0x7f, 0x7fff}}}, @RTA_NH_ID={0x8, 0x1e, 0xe91}]}, 0x34}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r9, 0x207}, 0x14}}, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000010401020100004bfa3ea4000000000a080003400000000306000640000402000500010004000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000090}, 0x2) sendfile(r0, r0, 0x0, 0x9) 13m31.521918158s ago: executing program 1 (id=5598): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x14, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 13m31.439946461s ago: executing program 1 (id=5601): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000180)) unshare(0x600) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf02000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000100800024000"], 0xfc}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) 13m30.967933904s ago: executing program 1 (id=5608): pipe(0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x28}, 0x0) 13m30.814199563s ago: executing program 1 (id=5612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000200000009fc"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="0100feff0000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009"], 0x184}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB="14000100fe8000000000000000000000000000aa0c00a30005000000000000"], 0x3c}], 0x1}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r6, 0x29, 0x6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x0, 0xa, {{0x5, 0x4, 0x2, 0xe, 0x14, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}}) 13m30.725684611s ago: executing program 1 (id=5616): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x6000000, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000600000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138) 13m15.689313598s ago: executing program 32 (id=5616): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x6000000, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000600000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x138) 4.056456247s ago: executing program 3 (id=12510): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x3000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000009, 0x50, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000494000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x1000) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xd, 0x28011, r2, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4, "14655b50"}, &(0x7f0000000180)=0x2c) 2.631075958s ago: executing program 3 (id=12521): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (async) unshare(0x8060000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@dellinkprop={0x2c, 0x6d, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8001, 0x100}, [@IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x4004000) socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000180)='mptcp_pm\x00', 0x0, &(0x7f00000001c0)={@align=0x3, {0x6, 0x2, 0x4, 0x4}}, 0x8000, &(0x7f0000000200), &(0x7f0000000240)=0x5d6}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000002c0)=0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x18, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x15, 0x8, 0x7, 0x2, 0xb050, r3, 0xa2ee, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0x0, @value=r3}, 0x50) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x8c, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xffffffffffff0083}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000700)={0x0, 0x2, 0x7fffffffffffffff, 0x6}) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x381, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x60, 0x6, "00bdd63053fb6abf2288bb46147d799cd1f440d5b89c6dda2f7f0c3c9ceb354fbfa9a2a6cc1b603e709b51af3a58ad1d45d804183b8e3aade6e4f23c8ba74a3c41a9dec63be9c1dc378512279be70663696ec2fc6b5c7d2e4a5c6d02"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6099c83e}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6a25e55}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x100, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xac, 0x6, "acc85bfdb9de0a3173257d92084ad9e4989ce5b79f2d342c7a20808a7b215d214fde34142a1f175c11666f010ae54025d24770a463b2775c487dc8291950c1158693206bc668bef679165fd526e2e0394dfce3396953dde67e3f738c363d1f4641b19981331966214eacc8bf220e7e34d0b3f57de2d791d680f34dfec26acd5b76ad75ee7a68a71221f4511b5a9a6684902e3aa518fa3fc16b676ae4c9bf669251a0a35aa2e9d6db"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) unshare(0x48000c00) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8011}, 0x8010) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000c40)={0x0, 0xe5, "d0b8d6bceb82e0e2025fefd6303c392406a4b2c139c77d265c6bad8f321fb42e1e6b01a53400d62990b5c981da62793a43a9b6bccbaf0b133f139b6df22442f833c8711b3f93824516ff16d5ab58dba005f3a05cb383c2fc484b350f5c76de4d49b5179aa2d186c44bb72a6d26c2328757231620bc79245b37e8b76161114127b7b7d30ea846cff67dab34c3848d7d77a09ef3933b524c220a7d752b2213770ae41b90791bba50e9f48c90716044f31bd66c52c35eb6e83fc1e3bffd4f282e4035cc475dd657ade0cb324a91952773def4569f3e996487d3a1fb9398a508b0a0a2432f001d"}, &(0x7f0000000d40)=0xed) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000d80)={r11, 0x8}, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r12, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40200800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r13, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xe8080}, 0x20004840) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f40), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r14, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, r15, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 2.592363096s ago: executing program 5 (id=12522): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x2000000, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 2.356990198s ago: executing program 5 (id=12526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d00a1ff0000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.225530458s ago: executing program 2 (id=12528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10000}, 0x50) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x400000000000004) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}}, 0x10) 2.14499688s ago: executing program 3 (id=12529): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbb00bbbbbbaaaaaaaaaabb86dd6d0020000008110000007000000000000000000000000000ff06"], 0x42) 2.067672084s ago: executing program 2 (id=12531): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x3000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000009, 0x50, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000494000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x1000) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xd, 0x28011, 0xffffffffffffffff, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4, "14655b50"}, &(0x7f0000000180)=0x2c) 1.904189103s ago: executing program 4 (id=12532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000003000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200"], 0x60}}, 0x0) 1.673451273s ago: executing program 5 (id=12534): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x800, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb", 0xd}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept(r5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'gre0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x8000, 0x10, 0x7f, 0x1, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x67, 0x0, 0x34, 0x0, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x3, 0xf}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0x1, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000a80)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x6, 0x400, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8000, 0x3, 0x3}}) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000000b6c0)=@deltfilter={0x67a0, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x8, 0xc}, {0x4, 0xa}, {0xe, 0xfff3}}, [@f_tcindex={{0xc}, {0x1fc8, 0x2, [@TCA_TCINDEX_POLICE={0xc18, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x101, 0x9, 0x4, 0xe3, 0xffff, 0x1000, 0xa, 0x3, 0x19c000, 0x4ccd, 0xe, 0x0, 0x400, 0xe, 0x3, 0x0, 0x5, 0x5, 0x1c3ff2c5, 0xa000, 0x7fff, 0x0, 0xe, 0x7, 0x8, 0xa, 0x7fff, 0x8001, 0x4, 0xfffffc01, 0x0, 0x400, 0x1000000, 0x8, 0x6, 0x401, 0x5, 0x5, 0x3, 0xfa, 0x9, 0x401, 0x6, 0x8, 0x674, 0x9, 0xc, 0xf75, 0x1d2, 0x0, 0x7, 0x11fd, 0x2, 0xfffffff0, 0x5, 0x2, 0x80000001, 0x9, 0x6, 0x4f9f, 0x1ff, 0x1000, 0x200, 0xc, 0x0, 0x0, 0x5, 0x4, 0x0, 0x2, 0x713, 0x8, 0x7, 0xf695, 0xfffffffd, 0x400, 0x6, 0x51, 0xef11, 0x3f7f, 0x7, 0x4, 0x60, 0x2, 0x3, 0x4, 0x9, 0x6, 0xffff, 0x3, 0x9, 0x7, 0x7, 0xa4, 0x2, 0x9, 0x8, 0x3, 0x8, 0x9, 0x80, 0x7, 0x10001, 0x2, 0x309, 0x4, 0x6, 0x9, 0x2, 0x3, 0x5, 0x5, 0x0, 0x8, 0x2, 0x7, 0x2, 0xffffffff, 0x7fffffff, 0x0, 0xb74, 0x4, 0x89, 0x4, 0x4, 0xfffffffa, 0x1, 0xb, 0x2, 0x7, 0x3ff, 0x1, 0xd, 0x0, 0x4, 0x2, 0x5, 0x6, 0x30000, 0x101, 0x9, 0xfffffff8, 0x2e2df90, 0x0, 0x10001, 0x6, 0x0, 0x10, 0xc3, 0x5, 0x9053, 0xfffffffa, 0x9, 0xe, 0x0, 0x3, 0x7fffffff, 0x7fff, 0x8, 0x3, 0x8, 0x2, 0xdf9b, 0x0, 0x0, 0x7, 0x7f, 0x21, 0x1, 0x6, 0x9f1b, 0x9, 0xcffe, 0x9, 0x4, 0x1, 0x400, 0x5, 0x2, 0xfffffe00, 0x0, 0x0, 0xdb, 0xc, 0x269, 0x4, 0x8, 0x1, 0x4, 0x10000, 0x4, 0xfffffff5, 0x80000001, 0xffffffff, 0xd, 0x1000, 0x1ff, 0x7, 0x8001, 0x2, 0xd17, 0x0, 0x5, 0x7fff, 0x7ff, 0x8001, 0x1ff, 0x1b, 0x4, 0x0, 0x4, 0x567, 0x7, 0x4, 0x5, 0x1e, 0x5, 0xfffff7a4, 0x2, 0xe, 0x0, 0x5, 0x6, 0x6, 0x1, 0xef, 0x401, 0x100, 0x4a0, 0xff, 0x1, 0x3, 0x7fff, 0x2, 0x8, 0x6, 0x5, 0x0, 0x9, 0x4, 0x1, 0xf, 0x5, 0xa, 0xb, 0x1, 0x9, 0xfffff655, 0xfff, 0x0, 0x400, 0x5, 0xd, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9f, 0xffffff0f, 0x9, 0x7, 0x7fffffff, 0x80000000, 0xb5, 0x7fffffff, 0x1, 0x40, 0x80000000, 0x4, 0x7, 0x7, 0xbfd, 0x4, 0x4, 0x7, 0x1, 0x3, 0x7, 0x3, 0x9, 0x7, 0xbba3, 0x5, 0xffffffff, 0xb98d, 0x3, 0x80000000, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x1, 0x80000001, 0x2, 0x9, 0x10, 0x10, 0xc, 0x4, 0x7, 0x0, 0x3, 0x0, 0x5, 0x3ff, 0x7, 0x7, 0x8001, 0x9, 0xdfd, 0x2, 0x4, 0x0, 0x9, 0xc601, 0x3ff, 0x18b0, 0x7f, 0x800, 0x8, 0x5b, 0xb, 0x80000000, 0x1, 0x4, 0xe2b, 0x8, 0x6, 0x5, 0x10, 0x4, 0x8, 0x3ff, 0x3, 0x0, 0x8, 0x9, 0x100, 0x9e36, 0x0, 0x3c81, 0x0, 0x7fffffff, 0x2, 0x401, 0x9, 0x0, 0x5, 0x166, 0xfffffff6, 0x2, 0x100, 0x7, 0xb, 0xda7c, 0x5, 0x9, 0x7f, 0x5, 0x3, 0x7, 0x6, 0x5, 0x939, 0x3cc, 0x1, 0x8, 0x6, 0x3, 0xfff, 0x824, 0x9, 0x9, 0x7, 0x1ff, 0x7, 0x7, 0x8, 0x5d5e, 0x6, 0x7, 0xd, 0x6, 0xc, 0x1, 0x8, 0x0, 0xb28f, 0xfffffff7, 0x3, 0x8, 0x0, 0x9, 0x5, 0x9, 0xffffff81, 0xfffffff9, 0x28, 0x3, 0x89, 0x9, 0xfffff1e1, 0x8, 0x7, 0x0, 0x10, 0x4, 0x18, 0x3, 0xb, 0x80000000, 0x2, 0x81, 0x7, 0xb1d6, 0x34e, 0x8, 0x0, 0x5, 0x1, 0x9, 0x67b7, 0xfffffff9, 0x1, 0x3, 0x7fffffff, 0xd, 0x80000001, 0x9b, 0x2, 0xc, 0xff, 0x2, 0x3, 0xb, 0xc9, 0x9449, 0x3, 0x7, 0x6, 0x6, 0x7, 0xc, 0x389, 0x174d, 0x0, 0x9, 0x7f, 0x0, 0x2, 0x2, 0xe, 0x5d1b, 0x9, 0x6, 0x9, 0x7, 0x9, 0x9, 0x9, 0x6, 0x722, 0x471, 0x24c, 0x8, 0x7, 0x0, 0x62, 0x10, 0x81, 0x80000001, 0xde, 0x4, 0x7, 0x1, 0x6, 0x5, 0x200, 0x3, 0x9, 0x2, 0x9, 0x702, 0xa, 0x1, 0x6, 0x3, 0x71, 0x8, 0xffff581b, 0x4, 0x7, 0x7f, 0x7, 0x2, 0x5, 0x5, 0x7f, 0x4, 0x9, 0x1, 0x10000, 0x10, 0x400, 0xf573, 0x5, 0x1000, 0x81, 0x401, 0xffffffdf, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8, 0xe8, 0x70d0, 0xdf93, 0x3, 0xdb, 0x9, 0xa2, 0x80000000, 0x1, 0x6, 0x400, 0x0, 0x5, 0x0, 0x8, 0x2, 0x9, 0x7, 0x1, 0x7fff, 0x8000, 0x8, 0x6, 0xb67, 0x3, 0xffffffff, 0x9, 0x7fff, 0x899, 0x3, 0x4, 0x5, 0x5, 0x7fffffff, 0x4, 0x6, 0x2e, 0xfffffff8, 0x3, 0x8, 0xfff, 0xf7, 0x9, 0x401, 0x1, 0x81, 0x1, 0x4, 0x9, 0x6, 0x1, 0x4, 0x9, 0x8000, 0x6, 0x6, 0x1, 0x8, 0x7fff, 0x2, 0x0, 0x10001, 0x10000, 0x7, 0x8, 0x6d7, 0x2, 0x5, 0x4, 0x0, 0xffffffff, 0x3, 0x7, 0xc, 0x3, 0x0, 0xfffffff7, 0x2, 0x5, 0xa0d, 0x401, 0x8, 0xff, 0xfffffff8, 0x4, 0xf, 0x6, 0x7, 0xdf, 0x2, 0x4, 0x5, 0x7bd, 0x1, 0x1, 0x80000001, 0x10, 0x7fffffff, 0x8, 0x9, 0x40ac0881, 0x6, 0x2, 0x5, 0x7, 0x3ff, 0x200, 0x2, 0xf6dc, 0x400, 0x6, 0x8, 0x3, 0x1000, 0x5, 0x81, 0x0, 0x2, 0x6, 0x40, 0x92d0, 0x5, 0x0, 0xfffffffe, 0xc1, 0x59f, 0x3, 0x0, 0x3bbb, 0x6ba, 0x0, 0xd5, 0x4, 0x6685b5d2, 0x5, 0x6abfdfb6, 0x200000, 0xf, 0x5, 0x80000000, 0x1ff, 0x8d0, 0x4, 0x7, 0x7, 0x8, 0x6, 0x83ed, 0x7fffffff, 0xffff0ee8, 0x7ff, 0x9, 0x3, 0x4, 0x700, 0x0, 0x4, 0x4, 0x2, 0x3ff, 0x8, 0x9, 0x3, 0x7, 0x7, 0x7, 0x80000000, 0x0, 0x0, 0x7, 0x6, 0x4, 0x1000, 0x7, 0x8, 0x7f, 0x10000, 0xfffff800, 0x0, 0x5, 0xddecf12, 0x7fff, 0x512e, 0x101, 0x9, 0x6b2, 0x6e29, 0x49, 0x83ea, 0x1, 0x2, 0x51ab, 0x9, 0x3, 0x1, 0x3, 0x80000000, 0x0, 0x7, 0x8ba2, 0x8000, 0x4ff, 0x3ff, 0x2, 0x0, 0x10, 0x3b1, 0x6, 0x8, 0x3ff, 0x8, 0x6609, 0x65, 0xffffffff, 0x400, 0xf22, 0x9, 0x2, 0xe, 0xee84, 0x9, 0x3d300, 0xc, 0x2, 0x7, 0x0, 0xc, 0x2, 0xfffffffb, 0x3ff, 0x3, 0xdf, 0x3ff, 0xefa, 0x8, 0x5, 0x7, 0x3, 0x8, 0x8e, 0x2, 0x8000, 0x10000, 0x1, 0x3, 0x3, 0x5ec, 0x7fffffff, 0x1, 0x4, 0x4, 0xff, 0x7, 0x3]}]}, @TCA_TCINDEX_ACT={0x248, 0x7, [@m_xt={0x1c4, 0xa, 0x0, 0x0, {{0x7}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xa0, 0x6, {0x3, 'filter\x00', 0x7, 0x0, "3d4a83428ddcecbf63723de51a31dc3dcc1ddfa29b4dff56512feff9554b159db92302e8c2b25135d334928878966c0b3c4c4f59d79289517a07151893326f59a2b5362c8f2d31e02e3cf6e9d41c119fd23c61f3224f336b767ec09fd1c5fcf7fe109c5c1fa3c2f7bc850bac6f766513cd4537b2fbcf"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x7d, 0x6, "afb9ec81f6e434a68e2cce37f974d5235001a089bc38d2e8672b08c9cf545e455e03b43c06af119da7a01665a428fe8c9ab0436accf66f264bfb0cdc772dce7b42b9d0b087abba2dfd67d911854f5f1598d84122e571b1a0c415a6df0f164c60de3bd0b30fec909b68fe9f1da2af24b38a8117420db4c5930e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x80, 0xa, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x3b, 0x6, "e118342b602b9f46e8043a9aa67f4db1686309127a008f7e7ef9aaa0784d5fa44c622e54324b1f1872561bfe73548c7c06df92123a628b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_TCINDEX_POLICE={0x46c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x73f2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x6, 0xff, 0x0, {0x81, 0x0, 0x6, 0x8, 0x401, 0x401}, {0x7, 0x0, 0x8, 0x5, 0x9, 0x8c2c}, 0x8000, 0x4, 0x2ed}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x10, 0xffff, 0x6, 0x326, 0x5, 0xad4c, 0x4c70, 0x800, 0x3, 0x7364, 0x9, 0x7fff, 0x10, 0x0, 0x400, 0x3, 0x3, 0x5, 0x7, 0x5, 0xfffffffd, 0x6, 0x800, 0x7fffffff, 0x9, 0x800, 0x40, 0x7fff, 0x7, 0x0, 0x3, 0xb, 0x2, 0x800, 0x0, 0xb35, 0x7, 0x0, 0xd01b, 0x8, 0x7ff, 0x800, 0x7, 0x0, 0x9, 0x1, 0x2, 0x2, 0xf, 0x8, 0x8001, 0x1, 0x0, 0x2, 0x7f, 0x5c4b, 0x0, 0xda960, 0x6, 0xb, 0x8, 0x5, 0x9, 0x3ff, 0xfffffff8, 0x5a0, 0x101, 0x9, 0x2, 0x7, 0x8001, 0x7, 0x2f, 0x9, 0x3, 0x0, 0x4, 0x3, 0xa74c, 0x8000, 0x1, 0xffffffff, 0x6, 0x1ff, 0x8, 0x39, 0x80, 0x7c, 0x0, 0xfffeffff, 0x5, 0x1, 0x1, 0x587, 0x0, 0x0, 0x5, 0xfb, 0x6, 0x0, 0x6, 0x6, 0x8, 0xc0a, 0x5, 0x9, 0x6, 0xffff, 0x8, 0xb, 0xfffffffc, 0xdd4, 0x10000, 0xe2, 0x7, 0x13692c16, 0x4, 0x6, 0xffff8001, 0x1000, 0x6, 0x10, 0x0, 0x4, 0x8, 0x4, 0x8, 0xfffffffc, 0x80, 0xe48a, 0xfffffff1, 0x3, 0x2, 0x2, 0xc1000000, 0x1, 0x6, 0x6, 0x5, 0x800, 0x7, 0x1, 0x1, 0x50000, 0x6, 0x2, 0x4, 0x3, 0x2, 0x7f, 0x10, 0x50000, 0x1, 0xffffff38, 0x401, 0xfffffff9, 0x5c000, 0x0, 0xff, 0x1, 0x7, 0x7, 0x7, 0x7fff, 0x80, 0x80000000, 0xfff, 0x7, 0x34, 0x7, 0x5, 0x5, 0xff, 0x7, 0x77ef, 0x101, 0xfd64, 0x0, 0xc1b2, 0x0, 0x80000000, 0xff, 0x10001, 0x6, 0x3d48, 0xc2a, 0x9, 0x8, 0x9, 0x5d96, 0x88, 0x3, 0x0, 0x7, 0xac, 0x9, 0x7, 0x80, 0xf8, 0x67, 0x3, 0x5, 0x5, 0x7, 0xfffffe00, 0x100, 0x81, 0x5, 0x4, 0x6, 0x7ff, 0x1, 0xea3, 0x9, 0x800, 0x0, 0x17, 0x800, 0x10000, 0xe86, 0xa, 0xfffffeff, 0x0, 0xffffff91, 0x3, 0xed, 0xfb, 0x9, 0x400, 0x2, 0x9059, 0xffffffff, 0x4e029bd, 0xfb, 0x4, 0x8, 0x7, 0xb, 0x255e, 0xdd, 0x3, 0x12, 0x3, 0x301a, 0x7f2e, 0xc5, 0x5, 0x80, 0x2, 0x3, 0x10001, 0x10000, 0x8, 0x2b, 0x5fc3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x56aa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_TCINDEX_ACT={0xcf8, 0x7, [@m_pedit={0xb24, 0x1d, 0x0, 0x0, {{0xa}, {0x4}, {0xaf8, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x88, 0xa, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_CT_PARMS={0x18, 0x1, {0x1118, 0xa4365b3, 0x8, 0x2, 0x5}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0xe4, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0xba, 0x6, "40a0e9317acbf7ee5d2aadca4ed6f8936599c53501295259e448e8689a7444bf23573ebc2fe147daeb3cfc1a1012237d87b14b1a461ae502a0054be191dd46e2f6ecf60ed0cc78bf073567b7846e0947b6722559da9202e9c23aeef8069b6a6007309fccf9092ccac17a1fb35ad366a266636e4a3649766b13aac9dc1051f5ee92ca0700b8dcacf3b0c7556106f584fc903b59b4d857f73865420a1a7cf595f3314b583eeff0e6c7d5bee456e3457e08e081afdedec4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_connmark={0x34, 0x7, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @f_rsvp6={{0xa}, {0x4c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x40, 0xeb, 0x7fffffff}, {0xfffffff7, 0x80000001, 0x1281}, 0x0, 0xf3, 0x24}}, @TCA_RSVP_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}]}}, @f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}]}}, @f_tcindex={{0xc}, {0x4}}, @f_rsvp6={{0xa}, {0x4}}, @f_rsvp6={{0xa}, {0x6c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_RSVP_DST={0x14, 0x2, @empty}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_POLICE={0x2c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_RATE64={0xc}]}]}}, @f_rsvp6={{0xa}, {0x45fc, 0x2, [@TCA_RSVP_ACT={0x45f8, 0x6, [@m_ife={0x84, 0x8, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4e, 0x6, "7545a04a3a623a489c3b1b29973fe3a85d2c6c78af0e68129b1eae817ab526faca64349d055d03eeca80c2fb601bc20e5bfccae1726c79ba01fe13d2c4db7024ced876b1d9d49d645575"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x1038, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x48, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x13, 0x6, "1896b9d1ed947a78a2c9344f1c710d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x31c8, 0x15, 0x0, 0x0, {{0xb}, {0x3164, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x5, 0x4, 0x8, 0x3, 0x1d, 0x91f8, 0x9, 0x7, 0x0, 0x7ff, 0x405e, 0x100, 0x7, 0x3, 0xfff, 0x1, 0x4, 0x2, 0x9, 0x9, 0x8, 0x3c578d1f, 0x8, 0x7, 0xffff, 0x9ca, 0xfffffff8, 0xa, 0x6, 0x5, 0x10a, 0x9, 0x800, 0x2, 0x7, 0xe, 0x1000, 0x5, 0x6, 0x1, 0x9, 0x3, 0xce, 0x7, 0x1, 0x1000, 0x9, 0x6, 0x7, 0x1000, 0x2, 0x5, 0x2, 0x10000, 0x8a3, 0x4, 0x364a, 0xfffffffe, 0x6, 0x7, 0x4, 0x3, 0x2, 0x100, 0x9, 0x0, 0x3, 0xffffc437, 0xd48, 0x1, 0xfffffffc, 0xb, 0x2ac4, 0xffff, 0x4, 0x8000000, 0x2, 0x43a2d9, 0x7fff, 0xbd2b000, 0x8f, 0x6, 0xb, 0x6a6f, 0x7, 0xffffff80, 0x8, 0x2, 0x1, 0x4e3d, 0x5, 0x10, 0x90e8, 0xfffff491, 0x3, 0x8, 0x2, 0xe8, 0x0, 0x401, 0x10000, 0x4, 0x9, 0xfff, 0x0, 0x10000000, 0x8, 0x0, 0x101, 0xffffff7f, 0x20000000, 0x0, 0x100, 0xd08, 0x3, 0xff, 0x80000001, 0x9, 0x664, 0x9a000, 0xffffffff, 0x9, 0x5, 0xe5e, 0x6, 0x6, 0x101, 0x10001, 0x5, 0x9, 0x0, 0x380, 0xffffff7f, 0x5, 0x7, 0x3, 0x5, 0x0, 0xffffff7f, 0x1, 0x6, 0x7, 0x8001, 0x1a, 0x8, 0x9, 0x6, 0x1, 0x4, 0x6, 0x5, 0x2, 0x6, 0x7, 0x4, 0x6648, 0x80000001, 0x0, 0x72a1, 0x9, 0x4, 0x8, 0x37, 0x78a7ad14, 0x8, 0x5a, 0x6, 0x0, 0x200, 0x7, 0x100, 0x7, 0x9, 0x3, 0x100, 0x6f82, 0x47be, 0x3, 0x401, 0x6, 0x5, 0x3, 0x5, 0x3ff, 0x2, 0xffffff01, 0x4, 0x6, 0x4e58, 0x8, 0x0, 0x9, 0xf0, 0x609, 0x50000000, 0xfffffffb, 0x2, 0x1, 0x9, 0x0, 0x2, 0x8, 0x8f1, 0x401, 0x101, 0x4, 0x401, 0xc, 0x5a, 0x7, 0x16, 0xa, 0x2, 0x2, 0x1, 0x5, 0x200, 0x1, 0x2, 0x2, 0x10000, 0x7, 0x9, 0x1b, 0x1, 0xfffffbff, 0x2, 0x95, 0x1, 0xfff, 0x5, 0x4f, 0x80, 0x81, 0x5, 0x9, 0x4, 0x7fffffff, 0x7, 0x3, 0xffff8001, 0x7, 0x5, 0xfffffc01, 0x0, 0xfffffffd, 0x8, 0x4d3f, 0xd4cd, 0x0, 0x1ff, 0x3, 0x44a, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0xf9, 0x7, 0xd, 0x100, 0x0, 0x7f00000, 0x80000001, 0x5, 0x3, 0x3, 0x6, 0xa852, 0x6, 0x8, 0x5, 0x3, 0xe, 0x10000, 0x7, 0x7, 0x665b, 0x80000000, 0x2, 0xc, 0x7, 0x79f6, 0x7, 0x25, 0x6363, 0x8, 0x1, 0x0, 0x1, 0x8, 0x9, 0x5, 0x9, 0x4, 0x1, 0xff, 0x7fff, 0x6, 0xffff4b9d, 0x6, 0x4, 0x2, 0x0, 0xd, 0x4, 0xda, 0x4, 0x9, 0x3, 0x9, 0x1, 0x5, 0x2, 0x10001, 0xcfb3, 0x7, 0x9, 0xb2, 0x3ff, 0x3, 0x9, 0x5, 0xa, 0x90, 0x5, 0x1, 0xd4, 0x1, 0x9, 0x40, 0x32e1, 0x8, 0x3931, 0x7, 0x0, 0xa49, 0xffff, 0x0, 0xffff, 0x10, 0x3, 0x793, 0x1ff, 0x0, 0x0, 0xbb, 0x9, 0xa73, 0x2288, 0x7, 0xb, 0xffff, 0xe, 0x4, 0xfffffff8, 0x7, 0x0, 0x800, 0x347e1f8, 0x34, 0xbce, 0xffff, 0x6, 0x7, 0x81, 0x2, 0x5, 0x8, 0x100, 0x4, 0x5, 0x1, 0x2, 0x100, 0x5, 0x1, 0x200, 0x6, 0x6, 0x100, 0x6, 0x4, 0x800, 0x14a8, 0x2f00, 0x6, 0x2, 0xffff, 0xc, 0x4, 0x6c7e, 0xec, 0xffffffff, 0x8, 0x2, 0x0, 0x4, 0x933f, 0x8, 0x3, 0x3, 0x800, 0x80000000, 0x2, 0x4, 0x303fb814, 0x8, 0x7fffffff, 0x1, 0x7, 0xd4, 0x4, 0x6, 0x10, 0x6, 0xf01, 0x10000, 0xd, 0x4, 0x2, 0x1, 0x6, 0x7, 0x3, 0x3, 0x3, 0x2, 0x5, 0x1, 0x8001, 0x0, 0x8, 0x6, 0xd2, 0x80000000, 0x0, 0x5, 0xd812, 0x9, 0xf, 0x1, 0x10000, 0x1, 0x7, 0x3, 0x1, 0x6, 0x9, 0xce55, 0xffffff7f, 0x4, 0xa, 0x1, 0x8001, 0x9, 0x180000, 0xffffffff, 0x10, 0x92c0, 0x5, 0x2156, 0x7, 0x1, 0x6, 0x1, 0xcf5, 0x8, 0x5, 0x1, 0x1, 0x3, 0xffff, 0x7, 0xd, 0x400, 0x401, 0x3, 0x6, 0x3, 0x5, 0x40, 0x7f, 0x2, 0x8, 0x8, 0x0, 0x4679, 0x8, 0x2, 0x3, 0x9, 0x4, 0x6, 0x1dba57e1, 0x8, 0x1, 0x0, 0x10000000, 0xed, 0x4, 0x7, 0x4, 0x1, 0x1, 0x80000000, 0x9f5e, 0xe, 0x7ff, 0x2, 0xc18]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffff0b, 0x0, 0x0, 0x7, 0x1, 0x1ff, 0x100, 0x3, 0x3, 0x4651d8d9, 0x8, 0x3df, 0x81, 0xfffffff8, 0x656, 0xffffffff, 0x9518, 0xb56, 0x8, 0x3031, 0xe, 0x401, 0x9, 0x5, 0xff, 0x2, 0x100, 0x7fffffff, 0x6, 0x817, 0x19, 0x4, 0x5, 0x7, 0x7, 0x8680000, 0xeede, 0x9, 0x0, 0xe, 0x7, 0x5, 0x4, 0x8, 0xedf5, 0x1ff, 0xe594, 0x9, 0x80000001, 0x20, 0x2, 0x1ff, 0x6, 0x1ec, 0xeda9, 0x9, 0x0, 0x9, 0xffffffa5, 0x5, 0x1, 0x4b, 0x61, 0x9, 0x358, 0x6, 0x9, 0x8, 0x3, 0x4, 0x6a, 0x4, 0x4, 0x7, 0xfffffe01, 0x7cc, 0x2, 0x8, 0x2bb, 0xed, 0x9d6, 0xffff13a0, 0x7, 0x10, 0x2, 0x3, 0x3ff, 0x6, 0x39, 0x0, 0x8, 0x8, 0x1ff, 0x7fff, 0x1, 0x4, 0xfa0, 0x6, 0x0, 0xff, 0x9, 0x401, 0x0, 0x8, 0x2, 0x9, 0x100, 0x8, 0x7, 0x5, 0x9, 0x3, 0x9f, 0xe, 0x3, 0x800, 0x5, 0x8, 0x2, 0x31, 0x4, 0x1bb, 0xfffffff8, 0x2, 0x4, 0xfe8, 0x1, 0x1, 0x5, 0x116, 0x3, 0x200, 0x0, 0x6, 0x32b0, 0x3, 0x91, 0x4, 0x6, 0x80000000, 0xfffffffc, 0x3, 0x1045, 0x7, 0x80000001, 0x5, 0x7, 0x4, 0x9, 0xfffffffa, 0x6, 0x0, 0x2, 0x80000000, 0x7, 0x1, 0xabb, 0x7, 0xffff, 0x7af6, 0x7, 0xffffff40, 0x4, 0x10000, 0x2, 0x101, 0x2, 0xd, 0x909, 0x82e9, 0xfff, 0x6, 0x9, 0xfffffff9, 0x5, 0xffff1069, 0x9, 0x1, 0x0, 0x9, 0x8001, 0x6, 0x283d, 0x81, 0xffff, 0xfffff5e5, 0x5, 0x6, 0x60f, 0xfffffff8, 0x200, 0xffffffff, 0x7, 0xb354, 0x7, 0x2c9e5466, 0x3, 0x4, 0x0, 0x5, 0xee, 0x4, 0x4, 0x5, 0x400, 0x3, 0x2, 0x3, 0x8, 0x3ff, 0xafc1, 0x401, 0x2, 0x225a, 0x2, 0x4, 0xfffffff8, 0x2, 0x3ff, 0x5, 0x800, 0xf, 0xc3, 0x55, 0x61, 0x4ab274f2, 0xfffffe01, 0x2, 0x9, 0x40, 0xff, 0x6, 0x10000, 0xeb, 0xf690, 0x4, 0x7, 0xfffffffd, 0xfff, 0x3, 0x10000, 0x5, 0x401, 0xdf, 0xe7e, 0x826f, 0x7, 0x9, 0x81, 0x8, 0x8, 0xffffffff, 0x6498, 0x0, 0x81, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0x9, 0x7, 0x3, 0x3, 0x1, 0x7fffffff, 0x81, 0x2, 0x67a4, 0x2, 0x0, 0x1, 0x6, 0x5, 0x5, 0x7f, 0x3, 0x5, 0x2, 0x1, 0x1, 0xfffffff8, 0x6, 0xe0000000, 0x7, 0x2, 0x2, 0x10, 0x7, 0x1, 0x5, 0xe, 0x0, 0x7, 0x5, 0x8, 0x7, 0xfffffeff, 0x2, 0x1ff, 0x80, 0x1be, 0x7ff, 0x476e6b42, 0x4, 0x9, 0x8, 0x8, 0x4, 0xf01, 0x8, 0x6, 0xffffffff, 0x8, 0x4, 0x0, 0xfffffffb, 0x79db, 0x79, 0x8, 0x162, 0x4, 0x800, 0x4, 0x1, 0x689, 0x400, 0x9, 0x509, 0x3, 0x10001, 0x6, 0x7d0, 0x4, 0x0, 0x10, 0x2, 0xfffff805, 0x4, 0xfad, 0x0, 0x81, 0x6, 0x9, 0x9, 0x4, 0xffffffff, 0x6f, 0x8, 0x0, 0x96af, 0x3ff, 0x4, 0x1, 0xb5, 0x2, 0x6, 0x6, 0x9, 0x4, 0x2, 0x2, 0x0, 0x8000, 0x6, 0xe5b, 0xfffffffc, 0xbf0, 0x4, 0x9, 0xe44, 0x8001, 0x5, 0x7, 0xfff, 0x80000, 0x7, 0x6d, 0x6, 0x9, 0x8, 0x564f, 0x0, 0x3, 0x0, 0x5, 0x10, 0x8, 0xd9b, 0x9, 0x4, 0x1f51, 0x436, 0x200, 0xf10, 0x6, 0x2, 0x9, 0x80, 0x0, 0x7, 0x10, 0x9, 0x1c0000, 0x5, 0x32d, 0x8001, 0x101, 0x400, 0x101, 0xe, 0xdc46, 0x8, 0x2, 0xc, 0x6, 0x1, 0x0, 0x1, 0x8, 0xfffffff8, 0x5, 0x9, 0x2, 0x7fff, 0x7, 0x7, 0xb9, 0xc, 0x2, 0x7fffffff, 0x7db, 0x5, 0xff, 0x791, 0x8001, 0x0, 0x7, 0x4, 0x5, 0x2, 0xdc6, 0xfffffffc, 0x200, 0x5, 0x4, 0x8, 0x7, 0x6, 0xe, 0x3, 0xfffffffc, 0xce3, 0xc, 0x81, 0x6e50, 0x2, 0x742, 0x10001, 0x4, 0x7, 0xfffffff7, 0x8, 0x7, 0xb75, 0x9, 0x6, 0x7, 0x3, 0x7, 0x3, 0x3, 0x7d, 0x8dfa, 0xd, 0x120000, 0x3, 0x7fffffff, 0x7, 0x40c5, 0x401, 0x8, 0x6, 0x2, 0xd, 0x200, 0x81, 0x3e, 0x6, 0x4, 0x8, 0x7, 0x8, 0x29, 0xba9c, 0x0, 0x4, 0x8, 0x3, 0x8000, 0x8, 0x7, 0x10, 0x48, 0x2, 0x9, 0xffff, 0xfffffeff, 0x2, 0x1431, 0x2, 0x6, 0x3a, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x1, 0x0, 0x5, 0x0, 0x80000000, 0x648, 0x8, 0xff, 0x0, 0x8, 0x2, 0x48, 0xb, 0xfffffffe, 0xffffff96, 0xff, 0x271, 0x7, 0x8, 0x3, 0x4, 0x9, 0x10, 0x8, 0x0, 0xd1, 0xa2, 0x5, 0xe9, 0x2, 0x6, 0x5, 0x6, 0xffff, 0x1, 0xb, 0x1, 0x9, 0x7, 0x4180000, 0x3, 0x40, 0xd, 0xb3, 0x4, 0x9, 0xffffffff, 0x7, 0x4, 0x2, 0x7fff, 0x4, 0xfffffffb, 0x1ff, 0xff, 0x3, 0xffff, 0x9, 0x3, 0xc, 0x7, 0x10000, 0x6, 0x10, 0xfffffffd, 0x2, 0x4, 0x5d64, 0x8, 0x4, 0x7fe7, 0x7f, 0x81, 0x8, 0x8, 0x10000, 0x0, 0x9, 0xd, 0x7, 0x8, 0xfff, 0x2, 0x4, 0x10000, 0x0, 0x6, 0x65e, 0x3, 0x2, 0x5, 0x5, 0x10, 0x9, 0xe, 0x9, 0xfffff579, 0x9, 0x6, 0x1000000, 0x8d, 0x9, 0xffffffc0, 0xfff, 0x7, 0x9, 0x9e56, 0x81, 0xb, 0x800, 0x3, 0x3, 0xfffffffc, 0xfffffff8, 0xe, 0x7, 0xffff, 0x2, 0xaa2a, 0x400, 0x2, 0x5, 0xe56, 0xff, 0x4d60, 0x9, 0x8, 0x1, 0x2, 0xd655, 0x3, 0x5, 0x4, 0x7ff, 0xd91, 0x9, 0xa, 0x2fd2, 0x171f, 0x3, 0x8, 0x101, 0xfffffffd, 0x5, 0x0, 0xffffffff, 0x2, 0x3, 0x8, 0x3, 0x1000, 0x2, 0x10000, 0xffffff80, 0x6, 0x2, 0x0, 0x4, 0x7f, 0x4, 0x1, 0x3, 0x5, 0xe, 0x9, 0x868, 0x6, 0x3, 0x7fffffff, 0x9, 0x0, 0x4119, 0x0, 0x6, 0x80000001, 0xffff0001, 0x2, 0x7, 0x1ff, 0x0, 0x3, 0x0, 0x0, 0x6, 0x9, 0xa500, 0x4, 0x7, 0x8, 0x3, 0x5f34000, 0x14e, 0x5, 0xa00000, 0x9, 0x5, 0xffffffff, 0x7, 0x200, 0x1ff, 0x2, 0x7, 0x0, 0x3a4d3491, 0x40, 0x3, 0x9, 0x93, 0x2, 0xa75, 0x7, 0x0, 0x4, 0x9, 0x4, 0xaacb, 0xa, 0x100, 0x3, 0x0, 0x3ff, 0x469, 0x7fffffff, 0xe, 0x1000, 0x1, 0x3ff, 0x4, 0x8, 0x0, 0x10001, 0xc, 0x8, 0x6, 0x1ce9bc2a, 0xfffffffb, 0x9, 0xcff8, 0x5, 0x5, 0x6, 0xc, 0x93b, 0x9, 0x5, 0x400, 0x1000000, 0x80, 0xffffffff, 0x800, 0xc, 0x5, 0xa, 0xba4f, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x2, 0x8, 0x81, 0x9, 0x800, 0x1, 0xffff, 0x2, 0x0, 0x40, 0xb35, 0xffffffff, 0xd, 0x6, 0xd9, 0x9, 0x401, 0x5, 0xf, 0x4, 0x9, 0x6, 0x6582, 0x7e, 0x7f, 0x0, 0x8, 0x6, 0x7, 0x5, 0x9, 0x101, 0x6, 0x6, 0x4, 0x9, 0x7, 0x80000000, 0x5, 0x0, 0x5, 0x4, 0xc8b, 0x2000, 0x0, 0x7ff, 0xfff, 0x2, 0x7, 0xe, 0xfffffffd, 0x401, 0x7f, 0x0, 0x4, 0x3c, 0x4a16, 0x3, 0x40, 0x3, 0x1000, 0x9, 0x4, 0x384c8c0e, 0x9, 0x4, 0x7, 0x0, 0xfffffffa, 0x35, 0x33a, 0xd, 0xbad, 0x10001, 0xfffffff9, 0x4, 0xb, 0x100, 0x6, 0x1, 0xd31, 0x9, 0x9, 0x8000, 0x0, 0x73, 0xa, 0x3, 0x10, 0x9, 0x5, 0x28, 0xfff, 0x1, 0x0, 0x0, 0x7e8, 0x10000, 0x8, 0x80000001, 0x0, 0xc, 0x2, 0x4, 0x5, 0x8, 0x9, 0x7, 0x4, 0x0, 0x5ab96c75, 0x0, 0x4, 0x9, 0x0, 0x1, 0xf, 0x2, 0x2, 0x6, 0x3, 0x0, 0xfffffffe, 0x0, 0xb, 0x8, 0x10001, 0x8ee, 0x37, 0x8, 0x5, 0xe3c1, 0xfffffff8, 0x200, 0x5, 0xfffffe00, 0x6, 0x8001, 0x9, 0xcf1, 0x4, 0x9, 0x8, 0x7, 0x7219, 0x8, 0x1000, 0x8, 0xb14f, 0x4, 0x0, 0x3, 0x0, 0x7, 0xf13c, 0x7, 0xf, 0x5, 0x2, 0x4, 0x30e, 0x3, 0x7fff, 0x7, 0x7, 0x9, 0x8, 0x81, 0x101, 0x5, 0x4, 0x8000, 0x8000, 0xff, 0x5, 0x1000, 0x80, 0x0, 0x819c, 0xd, 0x0, 0x2, 0xffff, 0x9, 0x2, 0x8, 0x1, 0x9, 0xa26f, 0x2, 0x4, 0x3, 0x8, 0x29, 0x0, 0x6, 0x800, 0x3, 0x1ff, 0x8, 0x0, 0x10001, 0x3ff, 0x8, 0x2, 0x7f50, 0x1000, 0x3, 0xc41, 0x3, 0x49045f16, 0x5, 0x7fffffff, 0x4, 0x7f, 0x1, 0x64b, 0x4, 0xc, 0xfffffff8, 0x3, 0x7, 0x9, 0x2, 0x6, 0x6, 0x0, 0x1, 0x7, 0x7, 0xb06, 0x1, 0x0, 0x9, 0x2, 0x3, 0x7, 0x2, 0x7, 0x2, 0xd85a, 0x401, 0x6, 0x7fff, 0x2, 0xffff986c, 0x40, 0x40000000, 0x0, 0x9, 0xa39, 0x1ff, 0x9, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x5, 0x0, 0xa, 0x40, {0x3, 0x1, 0xc, 0x6, 0x2, 0x9}, {0x0, 0x1, 0x5, 0x9, 0x2, 0x1}, 0x800, 0x7}}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x8000, 0xffffffff, 0x0, 0x6, 0x93c, 0x9, 0x7, 0x652, 0x7, 0x81, 0xff, 0x3, 0x5, 0xfffff784, 0xd0, 0x2, 0x1764, 0x1, 0x2, 0x0, 0x5, 0x37ee, 0x9, 0x4, 0x5569, 0x0, 0x4, 0xffffffff, 0x2, 0xd60, 0x2138d267, 0x3, 0x1, 0xe6, 0x10, 0x9, 0x2, 0x0, 0x27, 0xf363, 0x9, 0xf, 0xe, 0x2, 0x4, 0x6, 0xbcb2, 0x10, 0x9e280000, 0xc, 0x2, 0x4, 0x4, 0x2, 0x0, 0x1, 0x9, 0xfa1, 0x100, 0x0, 0x2, 0x6bd, 0xe2, 0x3, 0x0, 0x0, 0x2da, 0x795f, 0x80000000, 0x57b4, 0xb, 0x80, 0x4, 0x7ff, 0x5, 0x100, 0x3, 0x8e3, 0x5, 0xc, 0x755, 0x5, 0x6, 0x2, 0x0, 0x3, 0x6ad6, 0x5, 0x8, 0x3, 0x6, 0x8, 0x2ae34407, 0xffff, 0x6, 0x8000, 0x9, 0x3, 0x10001, 0x5, 0x5, 0x4, 0x5, 0x6, 0x10000, 0x1ff, 0x1, 0x3, 0x7, 0xe, 0xfffffa13, 0x7, 0xf12e, 0xb6a7, 0xfffffffd, 0x0, 0x8, 0x5, 0x0, 0xf56, 0x0, 0x10000, 0x2, 0x1, 0x2e32, 0x2, 0xc, 0x6, 0x0, 0xc27, 0x9, 0x4, 0x9, 0x4, 0x7fff, 0x1, 0x40, 0x200, 0x6, 0x3ff, 0xd, 0xff, 0xac55a794, 0xfffffffb, 0xb4, 0x6, 0x3, 0x8, 0x0, 0x0, 0x2, 0x2, 0x8000, 0x3, 0x80, 0x4, 0xcf3d, 0xd1800000, 0xa, 0x1, 0x9, 0x1, 0x4, 0x2, 0x5, 0x1, 0x100, 0xf1f, 0x9, 0x2, 0x6, 0x5, 0x5, 0xb, 0x3, 0x4, 0x6, 0xfc9, 0x7f, 0x9, 0x9, 0x4, 0x652, 0xa, 0x7d1d9a6e, 0x0, 0x186, 0xff, 0xd, 0xc, 0x8001, 0x0, 0x8000, 0x7, 0x0, 0x2, 0x0, 0x7fffffff, 0x4, 0xc91, 0xf20a, 0x81, 0xeaf8e3f, 0xb7, 0xfffffff8, 0x5, 0xffff, 0x80000000, 0x5, 0x4000000, 0x3, 0x7, 0x80000000, 0x5, 0x0, 0x2, 0x4, 0x5f6, 0x1, 0xffff011a, 0x1829, 0x3, 0x5, 0x191, 0x1000, 0x4, 0x2, 0x4, 0x1, 0x3, 0x86, 0x5, 0x9, 0x4, 0x5, 0xaa92, 0x5, 0x1, 0x7f, 0x9, 0xfffffffd, 0x3, 0x3, 0x2, 0xfffffff8, 0xf, 0xfffffffb, 0x1ff, 0x9, 0x0, 0xb, 0x7d65, 0x80, 0x3, 0xfff]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x1, 0xca9, 0x8, 0x7, 0x7, 0x67c0, 0x80, 0xfffffffa, 0x6, 0x63, 0x4, 0xe8, 0x3ff, 0x80, 0x3, 0x6e, 0xfffffe01, 0xb15b, 0x1, 0x10, 0x2, 0x0, 0x7, 0x3, 0x80, 0x9, 0x4, 0xb159, 0x7, 0xb, 0x6d3, 0x0, 0x4, 0x1000, 0x9, 0x1ff, 0x8, 0x2, 0x40, 0x1000, 0x9, 0x4, 0x1, 0x3, 0x8, 0x2, 0x6, 0x4, 0x9, 0xc15, 0x3, 0xfffffffa, 0x2, 0x8, 0x1, 0x3e9b, 0xfffffffc, 0x778f, 0x3, 0x7f, 0x8, 0x6, 0xf, 0x74d, 0x2, 0x2, 0x2, 0x3, 0x5, 0x6, 0x1, 0x2fba, 0x0, 0x4, 0x3c, 0x5, 0x5, 0x0, 0x0, 0x4, 0x1, 0x804, 0x1, 0x3, 0x7, 0xc9, 0xffff, 0x2, 0xa, 0x4, 0x1, 0x8, 0x6, 0x5, 0x4, 0xff, 0xfff, 0x5, 0xd, 0x80b, 0x6, 0x4, 0x8, 0x9, 0x0, 0x0, 0xd9, 0x401, 0x6, 0x1, 0x7, 0x6, 0x8, 0x3, 0x33b9157, 0x7, 0x8, 0x7, 0x2, 0x80000000, 0xffffffff, 0x8001, 0x6, 0x40, 0x5, 0x7, 0x800000, 0x6, 0xfffffff8, 0xffff677a, 0xae, 0x2, 0x0, 0x628, 0x6, 0x33, 0x1, 0xb, 0xa3, 0x2, 0x4, 0x10, 0x5, 0xf6, 0xc, 0x6, 0x10000, 0x8, 0xd, 0x5, 0x9, 0xfffffffe, 0xb78, 0x0, 0x4, 0x7fff, 0xdac7, 0x60b, 0x6, 0x9, 0xfffffffd, 0x9, 0x6, 0x7, 0x5, 0x6, 0x3, 0x0, 0x2, 0x8, 0x4, 0x0, 0x31b, 0x6, 0x3, 0x0, 0x800, 0x6, 0x800, 0xfc, 0x3, 0xffffffa7, 0x8, 0x0, 0x3fc1, 0x7, 0x7f, 0x9, 0xb82, 0xd0, 0x0, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x1, 0x1, 0x2, 0x81, 0xffff, 0xa, 0x2, 0x6, 0x6, 0x20ae8000, 0x1, 0x1, 0x1, 0xfffffffe, 0xf, 0x5, 0xe, 0x9, 0x0, 0x2, 0x0, 0x6, 0x6, 0x9, 0x4, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x6, 0xc, 0x3, 0x9, 0x10, 0x7, 0x8, 0x32, 0x1, 0x3, 0xa, 0x9, 0x3, 0x7, 0xfd33, 0x3, 0xffffff3f, 0x8a1, 0x200, 0x5, 0x40000, 0x2, 0xcc8, 0x5, 0x8, 0x8, 0x88, 0x80000000, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x68}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x8, 0x9, 0x6, 0x7fffffff, {0x52, 0x2, 0x5, 0x1, 0x40, 0xc9b4}, {0x7, 0x2, 0x74b, 0xfff, 0x4, 0x6}, 0xff, 0x7, 0x80000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xe0, 0x6, 0x6, 0x400, 0x5, 0x2, 0x7f, 0x9fd6, 0x2, 0x9, 0x9, 0x401, 0x8, 0x8, 0x7, 0x7ff, 0xfffffffd, 0x81, 0x4, 0x32, 0x100, 0xfffffffd, 0x400, 0xb82, 0x90f, 0x1, 0x6266, 0x725a, 0x9, 0x9, 0x6, 0x4, 0x7, 0x1, 0x9, 0x6, 0xdaf5, 0x0, 0xbdf1, 0x1, 0x4, 0x1, 0x1, 0x1, 0x10001, 0x8000, 0x6, 0x81, 0xfff, 0x121, 0x3, 0x0, 0x6, 0x3, 0x200, 0x7, 0x4, 0x9, 0xf, 0x10, 0x93, 0x7fff, 0x9, 0x1abef03d, 0x7b8fca81, 0x6046, 0x3, 0x6, 0xb, 0x4e0, 0x2, 0x8, 0x2, 0x14c, 0xff, 0xffffffff, 0xc, 0x6, 0x11, 0x9a8c, 0x4183, 0x8, 0x6, 0x2, 0x8, 0x9, 0x4, 0x2, 0x8, 0x4, 0x1ff, 0x7, 0x9697, 0xfffffff9, 0xc40c, 0xf53, 0xfe, 0x27, 0x9, 0xa84, 0x5, 0x4, 0x4, 0x5, 0x1000, 0x9, 0x1, 0x3, 0xe8d6, 0xea, 0xd9f, 0x7, 0xc81, 0x3, 0x2, 0x6, 0x7, 0x1, 0x3, 0xffff, 0x800, 0x80, 0x1, 0x6, 0x5, 0x6, 0x8, 0x7, 0x2, 0x400, 0x0, 0x8, 0x89, 0x6, 0xfffffffc, 0x4, 0x6, 0x7, 0xe8, 0x9, 0x0, 0x1, 0x7, 0x4, 0x8000, 0x7fffffff, 0x7, 0x4, 0xfffffff9, 0x800, 0x5, 0x7, 0x8, 0x5, 0x6, 0x7, 0xffff0001, 0x9, 0x4, 0x6, 0x1, 0x1, 0x10, 0x7fff, 0x3, 0xa, 0x80, 0xe448, 0x1, 0x7, 0xff, 0x8, 0x58f1, 0x272b, 0xb, 0x4, 0xff, 0x5, 0xe, 0x8, 0x1, 0x80000001, 0x1, 0x1, 0x0, 0x101, 0x4, 0x5, 0x3, 0x2, 0x3, 0x8, 0x3, 0xf, 0x8, 0x0, 0x1, 0x3, 0x3a3, 0x4, 0x7, 0x80000000, 0x9, 0x80000001, 0x2, 0x3, 0x30, 0x2, 0x4, 0xb, 0x52f, 0x5, 0x1, 0x4, 0x1, 0x5b88, 0x22b, 0x7ff, 0x8001, 0x1, 0x2, 0xffffffff, 0x4, 0x99, 0x6, 0x0, 0x7, 0x0, 0x3, 0x8, 0x5, 0xfffffffa, 0x1ff, 0x6, 0xa, 0x6, 0xfffff862, 0x8, 0x0, 0x7, 0x5, 0x200, 0xde, 0xb44, 0x9, 0x180c, 0x9, 0x8, 0x0, 0x6, 0x4, 0x4b47, 0x7, 0x4, 0xd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x0, 0x4, 0x6, 0x0, 0x77, 0x6, 0x2, 0x985, 0x9, 0x7, 0x7, 0xffffffff, 0x3, 0x9, 0x1, 0x81, 0x3, 0x6, 0x5, 0xfff, 0xfffffff7, 0x5, 0x6, 0x8001, 0x80000001, 0x4, 0xfff, 0x4, 0xfffffff7, 0x0, 0x7, 0x7, 0x7, 0xdc0a, 0x8, 0x614b, 0x1, 0x0, 0x4, 0x6, 0x0, 0x400, 0x6, 0x89, 0x2, 0x0, 0xfff, 0x6, 0x0, 0xae, 0xfffffff8, 0x8, 0x7, 0x8000, 0x1000000, 0x8, 0x0, 0x9, 0x8, 0x6, 0x10, 0xfffffe00, 0x1, 0x0, 0x2, 0xfffffff1, 0x5, 0x101, 0x9, 0xa, 0x1, 0x0, 0x9, 0x5, 0x8, 0x5, 0x0, 0x4, 0x2, 0x2, 0x5, 0x7, 0x0, 0xb, 0x2, 0x4, 0x4, 0x2, 0x9, 0x7, 0x4, 0x3, 0x5, 0x3, 0xa, 0x8, 0x6, 0x3, 0x48, 0x8, 0x1, 0x1, 0xffffffff, 0x9, 0x400, 0xf, 0x4, 0x6, 0x3, 0x1, 0xfffffffe, 0x2, 0x4000, 0x7, 0xa, 0x8, 0x180000, 0xfffffff7, 0x8, 0x3, 0xfff, 0x5643, 0x9, 0x7, 0xffffffff, 0x3, 0x9, 0x2, 0x6, 0xfd2, 0x1, 0x7, 0x10000, 0x431, 0x7fffffff, 0x1, 0x7c9, 0xfff, 0x1, 0x2, 0x7, 0x6, 0x6, 0x101, 0xc, 0x9, 0x80, 0x5, 0x401, 0x7f, 0xff, 0xd, 0x9, 0xf, 0x5, 0x3, 0x2b7c6f55, 0x4, 0xffffffff, 0x2774, 0x6, 0x1, 0x5, 0xb, 0x30cea0b2, 0x6, 0x6, 0x3, 0x66f4, 0x0, 0x6, 0x0, 0x10001, 0x8, 0x8, 0x4, 0x5, 0x742cbea7, 0x7, 0x5, 0x10001, 0x8, 0xfffffff9, 0x6, 0x9, 0xe, 0x5, 0x4, 0xfffffff8, 0x5, 0x9, 0xe06e, 0x101, 0x9, 0x5, 0x9, 0x10000, 0x3, 0x8, 0x7fff, 0xc, 0x7, 0x4, 0x73000000, 0x7, 0x3, 0x7ff, 0x0, 0xc, 0x800, 0x7, 0xffffffc0, 0x0, 0xd3, 0x7, 0x101, 0x2, 0x2, 0x46f, 0x1, 0x2, 0x101, 0x7fff, 0x80000001, 0x4, 0x2, 0xa13f, 0x3, 0x400, 0x3, 0x0, 0x1, 0x8, 0x101, 0xa39, 0x5, 0x40, 0x5, 0x6d8, 0x315, 0x5, 0x9, 0x9, 0x5, 0x4, 0x2, 0x1, 0x0, 0x2, 0xe, 0x7ff, 0x8, 0xd, 0x203]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffff8, 0x64f, 0x5, 0x6, 0x886, 0x2, 0xcb69, 0x8996, 0x5d0, 0x7, 0x1, 0x4a07, 0xe, 0x4f, 0x0, 0xff, 0x8, 0x5, 0xd2, 0xbf, 0x2, 0x9, 0x9, 0x3, 0x80000001, 0xbd44, 0x10, 0xfff, 0x0, 0x5, 0xa, 0x9, 0x3, 0x6, 0x1, 0x3, 0x2, 0xbaf8, 0x10001, 0x8001, 0x5, 0x1, 0x1, 0xc6bc, 0x8, 0x5, 0x9, 0xff, 0xfffffffe, 0x4, 0x9, 0x800, 0x1, 0x5, 0xbb23, 0xe, 0x65, 0xe6b, 0x7, 0x1, 0xffffffff, 0x81, 0x9, 0x1, 0x2498, 0x7, 0x8000, 0x6, 0x9, 0x2, 0xf, 0x100, 0xff, 0x2, 0x7, 0x3, 0x7f, 0x5, 0x7, 0x1000, 0x7, 0x2, 0x2, 0x1, 0x9, 0x6, 0x6, 0xf, 0xc000, 0x91, 0x1, 0x81, 0x80000000, 0x1, 0x7, 0x4, 0x1000, 0x3, 0x6, 0xfe, 0x5, 0x9, 0x1, 0xfc, 0x6578, 0x0, 0xfffffffa, 0x1000, 0x5, 0x1, 0x9, 0x7, 0x8, 0x6, 0xfff, 0x9, 0x10, 0x0, 0x2, 0x9f, 0x2f, 0x6, 0xef, 0x40, 0x6, 0x8, 0x101, 0x10000, 0x7, 0x3, 0x2, 0x500, 0x9, 0xd764, 0x801b, 0x101, 0x9, 0xf30b, 0x3, 0x4, 0xfffffffe, 0x40, 0x8000, 0x7, 0x6, 0x81, 0x2, 0x2, 0x9, 0x10001, 0xfffffffd, 0xffff8001, 0x9, 0x6, 0xd, 0x59, 0x1000, 0x9, 0x7, 0x4, 0x6, 0x7, 0x69, 0xf20, 0xfe, 0x7ff, 0x7fffffff, 0x2, 0x80000000, 0x100, 0x101, 0x6, 0x6, 0x8, 0x8, 0x10000, 0x80000001, 0x4, 0x0, 0xfffff3bc, 0x6e, 0xffffffd3, 0x1ff, 0x8600000, 0x1, 0x7, 0x401, 0x20, 0x5, 0xffff, 0x6, 0x0, 0xfffffffe, 0x1, 0x4, 0x40, 0x1, 0x9, 0x0, 0xb, 0x7fff, 0x5, 0x10, 0x2, 0x3, 0xfffffffc, 0xffff256e, 0x4, 0xf, 0xfffffffc, 0xa7, 0x7fff, 0x1, 0x7fffffff, 0xf34d, 0x0, 0x894, 0x6, 0x5, 0x7, 0x8, 0x1, 0x8, 0xb84, 0x1, 0xcd0, 0x50000000, 0x4, 0x6, 0x9, 0x6, 0x7, 0xff, 0x1, 0x8001, 0x7, 0x0, 0x4b1, 0xf35, 0x1, 0x1, 0x400, 0x4, 0xa, 0x4, 0x385, 0x5, 0x8, 0x7, 0x5, 0x3ff, 0x4, 0x0, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x99e5, 0x3, 0x81, 0x7fffffff, 0x7, 0xe0e9, 0x9, 0x0, 0x81, 0xcd3, 0x7fff, 0x2000, 0x10, 0x9, 0x9, 0x0, 0x5, 0xb48b, 0x8, 0x7, 0x7f, 0x8, 0x0, 0x283, 0x2, 0x52, 0x2, 0x100, 0x5, 0x5, 0x7, 0x3073, 0x4, 0xa54, 0x1, 0x7, 0x2, 0x9, 0x9, 0xffff, 0xfffffffb, 0x1, 0x3, 0xffffff80, 0x2, 0x4, 0x1ff, 0x7fffffff, 0xfffffff8, 0x1, 0x939, 0x7, 0x8, 0x40, 0x2, 0x7fffffff, 0x59, 0x2, 0xa, 0x8, 0x7fffffff, 0x3, 0x1, 0xfffffffb, 0xe819, 0x8, 0x4, 0x1, 0xbe, 0x0, 0x5, 0x8000, 0x4, 0x5, 0x3, 0x0, 0x6, 0x9, 0x3, 0x8000, 0x5, 0x6, 0xc0000, 0x9, 0xca94, 0x5, 0x8, 0x1, 0xfffffffc, 0x7f, 0x1, 0x80, 0x9, 0x4, 0x707, 0xdf03, 0x9, 0x4, 0x1, 0x1, 0x7, 0x6, 0x3, 0x0, 0x2, 0xa7b, 0x9, 0x0, 0x6, 0x8bb5, 0x800, 0x1, 0x7, 0x0, 0x0, 0x6, 0x7, 0x7, 0x80000001, 0x6, 0xfffffffc, 0xfffffffc, 0x4, 0x7, 0x0, 0x0, 0x5, 0x3, 0x4, 0x2, 0x6, 0x2, 0x4, 0x1, 0x3ff, 0x2, 0xf8, 0x10000, 0x8, 0x2, 0x8, 0x3, 0x756, 0x1000, 0x1, 0xfffffff8, 0x5, 0xfffffff8, 0x5, 0x9, 0x7, 0xdc4, 0x1, 0x9, 0xed4, 0x9, 0xc, 0x7ff, 0x1, 0x3ff, 0xffffffff, 0x9, 0x7, 0x2, 0xbc, 0x0, 0x7, 0x400, 0x8001, 0x0, 0xfffffbff, 0x3, 0x6, 0xc, 0x8026, 0x3, 0x400, 0x90, 0xd, 0x45c5, 0x7ff, 0x101, 0xff, 0x711, 0x7ff, 0x9, 0xec0, 0xead, 0x35f, 0x7, 0x80, 0x80000000, 0x1, 0x5, 0x5, 0xb2, 0x4, 0x200, 0xa, 0x1, 0x9, 0x5, 0x2, 0x6, 0x1, 0x5, 0x70000000, 0xdf8d, 0xfffffff8, 0x51, 0x6, 0xd3, 0x2, 0x1, 0x9, 0x9, 0x5, 0x1, 0x27, 0x5, 0x5, 0x5, 0x5, 0x7, 0x1000, 0x1, 0x101, 0xdd, 0x1, 0xd55e, 0x0, 0xe, 0x8, 0x0, 0xa3a3, 0x8, 0x5, 0x6, 0x1e2, 0xa8, 0x800, 0x1, 0xf0e, 0x4, 0xfffffffc, 0x4, 0x81, 0xa, 0x5, 0x7, 0x2d8b, 0x80000000, 0x8, 0x1, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xce}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff72}]]}, {0x3a, 0x6, "faf8652d339bdac0ecbe31bc291e296be7cda1bf951c852fe71eb2d30a958b924ef30b9b99668a251c1701e0464021961ba94071e440"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x154, 0x20, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x9b38c51c0ba7ef9d, 0x4, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2000000, 0xe, 0xffffffff, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xc, 0x5, 0x800, 0x1af}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x7, 0x6, 0x8}, 0x8}}]}, {0xb2, 0x6, "e70fe107f5a6ab8e9a6614e483b5c0c36a535d849147b91572ddf008ab1689dcffe43dcffe3a0f57a5b6bd00325d8c48c103bad9fef7f2e70d5483f6288a934ef276bdffd06b764eb8c55ab5b7932eef24b7f3bbec6e5045ccb3179fe557e42d3b1785e53ac6553421a6fba81484ed2e0a10795304734969a7cf4dcba59a66f61112f062f1f0ea9599305bdbba2c4a7fc097b4cdbe0933f06548b2df5b5022b093116ff6e74752186d7cd67a7155"}, {0xc, 0x7, {0x0, 0xfe23f29eea343501}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x104, 0x18, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x18, 0x6, 0x7, 0x10, 0x1}, 0x2}}]}, {0xb8, 0x6, "597be43b23a90cf3bf013078eb6945550428b09e105f56ba229d6c2741c1be37edfa8e3e3b49ef27d45fbf910ff7d5d1a92bf1651cb2528b67e497b0e1a832f9f4a861968120cb03b9ab492162bf1ed21dba890102eb44cacad51d18b255013aed09414572e114937245e587258b0cc1abd5220525ecc38546f3e9b39b8ec54560a99b925eb38aef8dd5269ee7f6c999b8d17afe50f7b63adeeecd22c09b9d40160f37ce491a25fd0a541a9620d5079001ddb838"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xd0, 0x1d, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe89b, 0x8000, 0x20000000, 0xb673, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xad, 0x5, 0x20000000, 0x4, 0x100}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x3, 0x0, 0x3, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x3, 0x1ff, 0x2d}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7ff, 0x8, 0x5}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x668fef27840b691a}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @f_rsvp6={{0xa}, {0x6c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xffffffff, 0x10000}, {0x6, 0x8, 0x8}, 0x84, 0xd, 0x7}}, @TCA_RSVP_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x2, 0x8}, {0x4, 0x34800, 0x8000000}, 0x32, 0xaa, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}]}}]}, 0x67a0}, 0x1, 0x0, 0x0, 0x24008080}, 0x200048c5) recvmsg(r6, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) write(r4, &(0x7f0000000000)="23000300010006", 0x7) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 1.629673243s ago: executing program 4 (id=12535): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x6020480) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x9, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '-\r+&-'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r11, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r12, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000040)=0xb, 0x4) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.313290359s ago: executing program 3 (id=12536): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x3, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.272030051s ago: executing program 0 (id=12537): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d05cd4b92ea54c7beef", 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='memory.swap.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000200000000b44af8146f96b0df8500010000000085100000f80000ff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0xd, [0x1000, 0x42, 0x1, 0x9, 0x1, 0x2], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000100)=""/13}, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010500000a50000000090a010400000000000000000a0000040900010073797a310073797a310000000008000a40ffffffdc08000400000000140c000980080001400000008114000000140a0108000000000000000002000002140000001100010000000000000000000900000a00"/140], 0x8c}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x1, 0x15e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000280], 0x0, &(0x7f0000000240), &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x1e0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000040000040000e2fdca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081c0800030006010000bdad44ef9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000580)={0x0, 0xe, 0x9, [0x33, 0x100, 0xff, 0x7, 0xe9, 0x5, 0x2, 0x8, 0x2]}, &(0x7f0000000600)=0x1a) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000640)={r9, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x101, 0x75, 0x101, 0x1, 0x4}, &(0x7f0000000700)=0x98) 1.145586207s ago: executing program 4 (id=12538): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="fff6000000000000280012800b00010065727270616ef777332cb20e5a0d12006cdae049bde6c0bc49b1220809d07ed2120dcc487fe2c7ddf3e2100055"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483, 0x4484}}, 0x20}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000280), 0x8, 0x40, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r6) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002c214c1e258f9a568b8ba0d4"], 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x40000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r6) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c001200ca3085c3627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000440)={0x0, 0x8}, 0x8) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.081567651s ago: executing program 3 (id=12539): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x3, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="5cffffff", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 1.01775104s ago: executing program 0 (id=12540): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x1d], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 919.136837ms ago: executing program 3 (id=12541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10000}, 0x50) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x400000000000004) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}}, 0x10) 891.638017ms ago: executing program 4 (id=12542): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000001080001400000000108000240000000960cf79e0808000000000808000240fffffffb0800014000e000000800024000000007850a009024d46e4b419ea19e5ce2cf270209f4c61319baf4cbed4976c2bf97ffca176e5eb27f68078f69c0413c21821c853545ba68f3cc00"/175], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x3, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000004c0)={0x2000000000000127, &(0x7f0000000500)=[{0xfff, 0x5, 0xe, 0x4}, {0x1ff, 0x6e, 0x7f, 0x2}, {0x4, 0x48, 0x6, 0x7fff}, {0x3, 0x2, 0x4, 0x8}, {0x3ff, 0x3, 0xff, 0x2}, {0xf4c, 0x3, 0xa, 0x5}, {0x7, 0x8, 0x4, 0x100}, {0x4, 0xb5, 0x1f, 0x885e}, {0x2, 0xe, 0x0, 0xfffffffd}, {0x3, 0xfd, 0x0, 0x5}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x2, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x30b}]}, 0x34}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fdffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000ac95db74841b", 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000400)={@local, 0x10, r7}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3c}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x22080001) 865.7674ms ago: executing program 2 (id=12543): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x3, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007000000", @ANYRES32=r0, @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 813.76043ms ago: executing program 0 (id=12544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x7000, 0x75}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) 711.452087ms ago: executing program 5 (id=12545): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)="1a", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x40000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000680)={@remote, 0x0, 0x0, 0xfc, 0x0, 0x9, 0x6}, 0x20) 663.781769ms ago: executing program 0 (id=12546): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001d9"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x70}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x884) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000180001801400020076657468315f766972745f7769666900"], 0x2c}}, 0x0) 651.456179ms ago: executing program 2 (id=12547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x3000000, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x85}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x811}, 0x20000090) 473.442098ms ago: executing program 5 (id=12549): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x3, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 472.720929ms ago: executing program 2 (id=12550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c02b50800ffff8200bd84146efda07258c2e78e010001", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) (fail_nth: 12) 371.641574ms ago: executing program 0 (id=12551): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0xd, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006a00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xf}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x30, 0x80, 0x3, 0xfffff020}, {0x6, 0x0, 0x3}]}, 0x10) accept4$unix(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000000000e2ff00000000000019bf4d19d5a25dfa6586ac2e2baf3c2efe36c1b28fba77930b85c6465c5000a30cab6d106400e9d69caa19f27d47083eddfd09d06d7b2e1bae85f05b6a24b46cf5b7fec5b4fc7f5ba8240c41d3a6ac5679b5a2b450e1717ac0da30e27e185ab6067a1f2db972fb5c30575cec2cebafefebc934dca3a91c7ca67253bac10f279c1033e4c618673f0e3267655d23eb3662aef1c891", @ANYRES8=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005401600020000000600180040000000050017", @ANYRES8=r3, @ANYRESHEX=r1], 0x50}}, 0x4080) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/13, 0xc}], 0x100000000000004b, 0x4, 0xfffffffe) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f00000004c0)={0xa, 0x4e20, 0xc212, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="0aeaf0", 0x3}], 0x1}}], 0x1, 0xa091) recvfrom$inet(r7, 0x0, 0x0, 0x10000, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000200)={0x0, 0x7, 0x3, 0xc, 0x7, 0x5, 0x1, 0xffffffffffffffff}, &(0x7f0000000240)={0x40, 0x0, 0xd, 0x1, 0x0, 0x6, 0x4, 0x401}, &(0x7f0000000280)={0x1, 0xe, 0x7, 0x1, 0x1, 0x51ff, 0x6, 0x5}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x2]}, 0x8}) sendmmsg$inet(r9, &(0x7f0000000140), 0x4000000000000ae, 0x2000c894) 320.989051ms ago: executing program 4 (id=12552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000200000009fc"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000040004800800020001feff0008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009"], 0x184}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB="14000100fe8000000000000000000000000000aa0c00a30005000000000000"], 0x3c}], 0x1}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r6, 0x29, 0x6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x0, 0xa, {{0x5, 0x4, 0x2, 0xe, 0x14, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}}) 216.646806ms ago: executing program 5 (id=12553): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x3000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000009, 0x50, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000494000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x1000) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xd, 0x28011, 0xffffffffffffffff, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4, "14655b50"}, &(0x7f0000000180)=0x2c) 153.674247ms ago: executing program 2 (id=12554): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r3, 0x81}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r4, 0x6, 0x2, 0x40006, 0x1, 0x400}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) r5 = epoll_create(0x5) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x10}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)={0xa}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) socket(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0xd0, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) 115.796192ms ago: executing program 0 (id=12555): sendmsg$sock(0xffffffffffffffff, 0x0, 0x41) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='bpq0\x00', 0x50000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x9]}, {0x3, 0x0, 0x1}}, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x10001}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000200)=0x7fffffff, 0x4) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbb5bfa210e13074ed14d3a82bcd2c0d1bbbbbbbbbbbbbb08004e00005c0100000009019078ac1e0501ac1414aa072743ac1415aaac1e0001ac1414aac219165300030490781209183f2500000000650000006700007f0000017f00000100186371bd9b1c0300"], 0x0) 0s ago: executing program 4 (id=12556): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x102, 0x823}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe1a, 0xf}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x10000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0x8000000000000, 0x0, 0x2000c004}, 0x40000) kernel console output (not intermixed with test programs): 0x3b/0x150 [ 1406.291707][T10845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.291726][T10845] ? clear_bhb_loop+0x40/0x90 [ 1406.291749][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.291773][T10845] RIP: 0033:0x7f6f2219c799 [ 1406.291791][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.291806][T10845] RSP: 002b:00007f6f2303d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1406.291826][T10845] RAX: ffffffffffffffda RBX: 00007f6f22415fa0 RCX: 00007f6f2219c799 [ 1406.291840][T10845] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1406.291852][T10845] RBP: 00007f6f2303d090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.291864][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1406.291876][T10845] R13: 00007f6f22416038 R14: 00007f6f22415fa0 R15: 00007ffc6563d108 [ 1406.291906][T10845] [ 1406.541955][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.550362][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.878862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.225977][T10881] x_tables: duplicate underflow at hook 3 [ 1407.265274][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11327'. [ 1407.446151][T10891] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.11329'. [ 1407.603740][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.630728][T10907] netlink: 'syz.0.11331': attribute type 13 has an invalid length. [ 1407.919302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.973924][T10918] netlink: 'syz.2.11338': attribute type 3 has an invalid length. [ 1407.996329][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11338'. [ 1408.008499][T10918] netlink: 'syz.2.11338': attribute type 2 has an invalid length. [ 1408.033684][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11338'. [ 1408.086507][T10918] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1408.109979][T10920] erspan0: entered promiscuous mode [ 1408.121876][T10920] debugfs: 'hsr1' already exists in 'hsr' [ 1408.134487][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11338'. [ 1408.145150][T10920] Cannot create hsr debugfs directory [ 1408.164480][T10921] syzkaller0: entered promiscuous mode [ 1408.170646][T10921] syzkaller0: entered allmulticast mode [ 1408.249462][T10921] tipc: Enabled bearer , priority 0 [ 1408.477041][T10919] tipc: Resetting bearer [ 1408.600905][T10919] tipc: Disabling bearer [ 1408.642410][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.958699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.984213][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11351'. [ 1409.289486][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11356'. [ 1409.772066][T11002] wlan1 speed is unknown, defaulting to 1000 [ 1409.810331][T11002] lo speed is unknown, defaulting to 1000 [ 1410.295763][T11037] __nla_validate_parse: 4 callbacks suppressed [ 1410.295782][T11037] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11375'. [ 1410.719620][ T5889] net_ratelimit: 3 callbacks suppressed [ 1410.719638][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.432335][T11091] netlink: 876 bytes leftover after parsing attributes in process `syz.0.11389'. [ 1411.464214][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11389'. [ 1411.647285][T11094] FAULT_INJECTION: forcing a failure. [ 1411.647285][T11094] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.660261][T11094] CPU: 0 UID: 0 PID: 11094 Comm: syz.4.11390 Not tainted syzkaller #0 PREEMPT(full) [ 1411.660284][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1411.660295][T11094] Call Trace: [ 1411.660303][T11094] [ 1411.660311][T11094] dump_stack_lvl+0xe8/0x150 [ 1411.660340][T11094] should_fail_ex+0x412/0x560 [ 1411.660367][T11094] should_failslab+0xa8/0x100 [ 1411.660391][T11094] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 1411.660412][T11094] ? pfn_valid+0x125/0x4c0 [ 1411.660446][T11094] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 1411.660487][T11094] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 1411.660519][T11094] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1411.660562][T11094] ? 0xffffffffa0201654 [ 1411.660603][T11094] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1411.660636][T11094] ? _copy_from_user+0x94/0xb0 [ 1411.660661][T11094] ? bpf_test_init+0x113/0x150 [ 1411.660679][T11094] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1411.660702][T11094] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1411.660737][T11094] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1411.660764][T11094] ? __fget_files+0x2a/0x420 [ 1411.660792][T11094] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1411.660814][T11094] bpf_prog_test_run+0x2c7/0x340 [ 1411.660832][T11094] __sys_bpf+0x643/0x950 [ 1411.660859][T11094] ? __pfx___sys_bpf+0x10/0x10 [ 1411.660897][T11094] ? ksys_write+0x242/0x270 [ 1411.660918][T11094] ? __pfx_ksys_write+0x10/0x10 [ 1411.660944][T11094] __x64_sys_bpf+0x7c/0x90 [ 1411.660969][T11094] do_syscall_64+0x14d/0xf80 [ 1411.660986][T11094] ? trace_irq_disable+0x3b/0x150 [ 1411.661010][T11094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.661029][T11094] ? clear_bhb_loop+0x40/0x90 [ 1411.661052][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.661069][T11094] RIP: 0033:0x7efed399c799 [ 1411.661085][T11094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.661099][T11094] RSP: 002b:00007efed47bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1411.661119][T11094] RAX: ffffffffffffffda RBX: 00007efed3c15fa0 RCX: 00007efed399c799 [ 1411.661132][T11094] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1411.661153][T11094] RBP: 00007efed47bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.661164][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1411.661175][T11094] R13: 00007efed3c16038 R14: 00007efed3c15fa0 R15: 00007fff3dffd9a8 [ 1411.661202][T11094] [ 1411.921584][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11393'. [ 1412.089675][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11394'. [ 1412.190493][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.641421][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.652398][T31801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.681553][T11133] netlink: 'syz.3.11402': attribute type 13 has an invalid length. [ 1412.689856][T11133] netlink: 'syz.3.11402': attribute type 17 has an invalid length. [ 1412.874012][T11143] netlink: 'syz.5.11406': attribute type 13 has an invalid length. [ 1412.979905][T11133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.981536][T11148] netlink: 'syz.0.11407': attribute type 10 has an invalid length. [ 1412.987141][T11133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.002567][T11133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.009749][T11133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.034988][T11133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1413.199839][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.350909][T11152] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1413.375228][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11411'. [ 1413.401379][T11152] bond3 (unregistering): Released all slaves [ 1413.526995][T11157] vlan1: entered promiscuous mode [ 1413.543537][T11157] gretap0: entered promiscuous mode [ 1413.678706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.099436][T11180] netlink: 'syz.2.11417': attribute type 4 has an invalid length. [ 1414.172942][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11418'. [ 1414.251417][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.316585][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11419'. [ 1414.379797][T11189] tipc: Enabling of bearer rejected, already enabled [ 1414.564499][T11203] netlink: 'syz.0.11423': attribute type 13 has an invalid length. [ 1414.594877][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11423'. [ 1414.718829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.749350][T11212] ipt_ECN: cannot use operation on non-tcp rule [ 1414.782835][T11211] wlan1 speed is unknown, defaulting to 1000 [ 1414.788348][T11216] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11427'. [ 1414.829949][T11211] lo speed is unknown, defaulting to 1000 [ 1415.285423][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.758894][ C0] net_ratelimit: 1 callbacks suppressed [ 1415.758915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.852108][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.902887][T11225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.319574][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.456264][T11225] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1416.531251][T31806] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.568752][T31806] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.734614][T11221] wlan1 speed is unknown, defaulting to 1000 [ 1416.763464][T31806] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.784083][T31806] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.798830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.817478][T11221] lo speed is unknown, defaulting to 1000 [ 1416.933458][T11252] netlink: 'syz.4.11438': attribute type 5 has an invalid length. [ 1416.969753][T11252] __nla_validate_parse: 1 callbacks suppressed [ 1416.969774][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11438'. [ 1417.349320][T11267] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11445'. [ 1417.358503][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11445'. [ 1417.369916][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.838716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.151449][T11296] netlink: 'syz.2.11452': attribute type 10 has an invalid length. [ 1418.184661][T11301] netlink: 'syz.0.11453': attribute type 13 has an invalid length. [ 1418.380568][T11304] netlink: 'syz.2.11454': attribute type 1 has an invalid length. [ 1418.400886][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.500833][T11306] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1418.547568][T11306] bond2 (unregistering): Released all slaves [ 1418.636325][T11321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11454'. [ 1418.744301][T11312] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1418.755724][T11312] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1418.801827][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.872349][T11321] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 1418.881619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.974950][T11315] bond3: (slave bridge5): Enslaving as an active interface with a down link [ 1419.064132][T11304] macvlan2: entered promiscuous mode [ 1419.079776][T11304] macvlan2: entered allmulticast mode [ 1419.107700][T11304] bond3: entered promiscuous mode [ 1419.136818][T11304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1419.231028][T11304] bond3: left promiscuous mode [ 1419.474862][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.489423][T11348] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11466'. [ 1419.547889][T11351] netlink: 'syz.5.11467': attribute type 2 has an invalid length. [ 1419.579211][T11351] netlink: 84 bytes leftover after parsing attributes in process `syz.5.11467'. [ 1419.612976][T11352] bond3: entered promiscuous mode [ 1419.625983][T11353] vcan1: entered promiscuous mode [ 1419.632019][T11353] vcan1: entered allmulticast mode [ 1419.637700][T11353] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1419.650295][T11353] bond3: (slave vcan1): Error -95 calling set_mac_address [ 1419.823595][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11473'. [ 1419.918724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.993116][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11473'. [ 1420.034470][T11379] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1420.355927][T11391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11477'. [ 1420.409633][T11394] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11477'. [ 1420.500063][T11397] SET target dimension over the limit! [ 1420.696878][T11407] netlink: 'syz.4.11484': attribute type 10 has an invalid length. [ 1420.730299][T11407] bridge0: port 3(dummy0) entered blocking state [ 1420.747152][T11407] bridge0: port 3(dummy0) entered disabled state [ 1420.779574][T11407] dummy0: entered allmulticast mode [ 1420.929695][T11420] netlink: 'syz.5.11488': attribute type 5 has an invalid length. [ 1420.958869][ C0] net_ratelimit: 2 callbacks suppressed [ 1420.958894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.979959][T11423] netlink: 'syz.4.11490': attribute type 3 has an invalid length. [ 1421.281559][T11440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1421.386626][T11434] xt_CT: No such helper "pptp" [ 1421.522179][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.549603][T11448] vlan5: entered promiscuous mode [ 1421.862204][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.870917][T11466] Cannot find add_set index 2 as target [ 1421.998892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.032291][T11473] netlink: 'syz.0.11512': attribute type 4 has an invalid length. [ 1422.175336][T11480] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1422.324648][T11480] bond4 (unregistering): Released all slaves [ 1422.403514][T11497] netlink: 'syz.4.11517': attribute type 1 has an invalid length. [ 1422.406657][T11491] ip6erspan1: entered allmulticast mode [ 1422.412708][T11497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.562222][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.737456][T11508] netlink: 'syz.4.11522': attribute type 1 has an invalid length. [ 1422.839447][T11508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1422.893762][T11516] __nla_validate_parse: 5 callbacks suppressed [ 1422.893780][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11522'. [ 1422.921419][T11513] veth0: entered promiscuous mode [ 1422.953039][T11513] vlan5: entered promiscuous mode [ 1423.038813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.102768][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11527'. [ 1423.152994][T11525] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11528'. [ 1423.523000][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.532057][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1423.608287][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.764350][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11541'. [ 1423.868718][T11561] syzkaller1: entered promiscuous mode [ 1423.875923][T11561] syzkaller1: entered allmulticast mode [ 1424.114317][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11545'. [ 1424.148393][T11576] vlan4: entered promiscuous mode [ 1424.198888][T11576] gretap0: entered promiscuous mode [ 1424.542530][T11598] syzkaller1: entered promiscuous mode [ 1424.568478][T11598] syzkaller1: entered allmulticast mode [ 1424.703511][T11604] netlink: 'syz.0.11557': attribute type 3 has an invalid length. [ 1424.743288][T11606] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11558'. [ 1424.934439][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11562'. [ 1424.979873][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11562'. [ 1425.175313][T11627] syzkaller0: entered promiscuous mode [ 1425.206486][T11627] syzkaller0: entered allmulticast mode [ 1425.526904][T11650] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1425.532246][T11652] netlink: 'syz.2.11574': attribute type 4 has an invalid length. [ 1425.546043][T11650] syzkaller1: linktype set to 825 [ 1425.552822][T11650] netlink: 'syz.0.11573': attribute type 4 has an invalid length. [ 1425.563878][T11650] Cannot find add_set index 3 as target [ 1425.840301][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11577'. [ 1425.871435][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11578'. [ 1425.933575][T11664] vlan5: entered promiscuous mode [ 1425.943790][T11664] gretap0: entered promiscuous mode [ 1426.019577][T11670] 8021q: VLANs not supported on ip6_vti0 [ 1426.151279][T11679] netlink: 'syz.3.11584': attribute type 13 has an invalid length. [ 1426.159370][ C0] net_ratelimit: 6 callbacks suppressed [ 1426.159390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.221118][T11681] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20004 [ 1426.598926][T11700] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1426.719278][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.996533][T11714] netlink: 'syz.0.11597': attribute type 1 has an invalid length. [ 1427.008232][T11712] wlan1 speed is unknown, defaulting to 1000 [ 1427.133585][T11714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1427.181801][T11712] lo speed is unknown, defaulting to 1000 [ 1427.198930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.275778][T11717] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1427.294686][T11717] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1427.368168][T11717] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1427.535020][T11714] macvlan2: entered promiscuous mode [ 1427.544711][T11714] macvlan2: entered allmulticast mode [ 1427.561110][T11714] bond4: entered promiscuous mode [ 1427.569830][T11714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1427.614126][T11714] bond4: left promiscuous mode [ 1427.670818][T11723] wlan1 speed is unknown, defaulting to 1000 [ 1427.759718][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.929114][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.203893][T11723] lo speed is unknown, defaulting to 1000 [ 1428.799588][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.148518][T11758] vlan4: entered promiscuous mode [ 1429.282054][T31809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.839697][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.929247][T11776] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1430.126780][T11795] __nla_validate_parse: 6 callbacks suppressed [ 1430.126801][T11795] netlink: 7 bytes leftover after parsing attributes in process `syz.5.11624'. [ 1430.318733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.658382][T11815] wlan1 speed is unknown, defaulting to 1000 [ 1430.707829][T11815] lo speed is unknown, defaulting to 1000 [ 1430.751929][T11826] netlink: 'syz.2.11635': attribute type 2 has an invalid length. [ 1430.778208][T11826] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11635'. [ 1431.358690][ C1] net_ratelimit: 2 callbacks suppressed [ 1431.358717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.613036][T11862] syzkaller1: entered promiscuous mode [ 1431.635192][T11862] syzkaller1: entered allmulticast mode [ 1431.662027][T11864] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1431.919523][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.935829][T11871] netlink: 'syz.2.11649': attribute type 3 has an invalid length. [ 1432.240270][T11875] netlink: 'syz.2.11650': attribute type 10 has an invalid length. [ 1432.399997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.738153][T11888] wlan1 speed is unknown, defaulting to 1000 [ 1432.808292][T11898] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1432.833896][T11888] lo speed is unknown, defaulting to 1000 [ 1432.959404][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.969368][T31798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.978274][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.987169][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.195036][T11911] bond0: Caught tx_queue_len zero misconfig [ 1433.268076][T11920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11665'. [ 1433.350675][T11925] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11665'. [ 1433.439108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.958891][T11947] No such timeout policy "syz0" [ 1434.028770][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.109181][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.210088][T11958] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11677'. [ 1434.599893][T11967] netlink: 'syz.3.11681': attribute type 2 has an invalid length. [ 1434.607762][T11967] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11681'. [ 1435.193595][T11985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11689'. [ 1435.320703][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11689'. [ 1435.381296][T11985] veth0_to_team: entered promiscuous mode [ 1435.420822][T11985] veth0_to_team: left promiscuous mode [ 1435.499423][T11989] veth0_to_team: entered promiscuous mode [ 1435.532054][T11989] veth0_to_team: left promiscuous mode [ 1435.631513][T11997] syzkaller1: entered promiscuous mode [ 1435.643535][T11997] syzkaller1: entered allmulticast mode [ 1436.053511][T12008] netlink: 'syz.4.11697': attribute type 3 has an invalid length. [ 1436.252352][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11699'. [ 1436.558702][ C1] net_ratelimit: 4 callbacks suppressed [ 1436.558721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.733151][T12030] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.11706'. [ 1436.855324][T12037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11708'. [ 1437.058965][T11239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.200310][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.360447][T12060] syzkaller0: entered promiscuous mode [ 1437.369304][T12060] syzkaller0: entered allmulticast mode [ 1437.598886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.951685][T12064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11718'. [ 1437.986821][T12064] netlink: 43 bytes leftover after parsing attributes in process `syz.0.11718'. [ 1438.037167][T12064] netlink: 'syz.0.11718': attribute type 6 has an invalid length. [ 1438.044944][T12065] 8021q: VLANs not supported on lo [ 1438.077662][T12064] netlink: 'syz.0.11718': attribute type 5 has an invalid length. [ 1438.129335][T12064] netlink: 43 bytes leftover after parsing attributes in process `syz.0.11718'. [ 1438.227658][T12069] FAULT_INJECTION: forcing a failure. [ 1438.227658][T12069] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.240397][T12069] CPU: 0 UID: 0 PID: 12069 Comm: syz.2.11720 Not tainted syzkaller #0 PREEMPT(full) [ 1438.240423][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1438.240435][T12069] Call Trace: [ 1438.240444][T12069] [ 1438.240452][T12069] dump_stack_lvl+0xe8/0x150 [ 1438.240483][T12069] should_fail_ex+0x412/0x560 [ 1438.240510][T12069] should_failslab+0xa8/0x100 [ 1438.240533][T12069] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 1438.240552][T12069] ? pfn_valid+0x125/0x4c0 [ 1438.240582][T12069] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 1438.240622][T12069] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 1438.240651][T12069] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1438.240691][T12069] ? 0xffffffffa0201650 [ 1438.240730][T12069] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1438.240763][T12069] ? _copy_from_user+0x94/0xb0 [ 1438.240786][T12069] ? bpf_test_init+0x113/0x150 [ 1438.240805][T12069] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1438.240830][T12069] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1438.240867][T12069] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1438.240893][T12069] ? __fget_files+0x2a/0x420 [ 1438.240923][T12069] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1438.240946][T12069] bpf_prog_test_run+0x2c7/0x340 [ 1438.240969][T12069] __sys_bpf+0x643/0x950 [ 1438.240998][T12069] ? __pfx___sys_bpf+0x10/0x10 [ 1438.241039][T12069] ? ksys_write+0x242/0x270 [ 1438.241059][T12069] ? __pfx_ksys_write+0x10/0x10 [ 1438.241085][T12069] __x64_sys_bpf+0x7c/0x90 [ 1438.241107][T12069] do_syscall_64+0x14d/0xf80 [ 1438.241126][T12069] ? trace_irq_disable+0x3b/0x150 [ 1438.241150][T12069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.241168][T12069] ? clear_bhb_loop+0x40/0x90 [ 1438.241191][T12069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.241209][T12069] RIP: 0033:0x7f2e0fb9c799 [ 1438.241226][T12069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.241241][T12069] RSP: 002b:00007f2e10acb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1438.241261][T12069] RAX: ffffffffffffffda RBX: 00007f2e0fe15fa0 RCX: 00007f2e0fb9c799 [ 1438.241274][T12069] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1438.241286][T12069] RBP: 00007f2e10acb090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.241297][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1438.241308][T12069] R13: 00007f2e0fe16038 R14: 00007f2e0fe15fa0 R15: 00007ffedb70a0d8 [ 1438.241338][T12069] [ 1438.242336][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.492917][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.503255][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.519265][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.638901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.010797][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11724'. [ 1439.492797][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11730'. [ 1439.563566][T12098] xt_bpf: check failed: parse error [ 1439.599237][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.806362][T12112] netlink: 'syz.2.11735': attribute type 10 has an invalid length. [ 1440.227527][T12131] netlink: 'syz.4.11742': attribute type 1 has an invalid length. [ 1440.414647][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11745'. [ 1440.671898][T12151] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11749'. [ 1440.726240][T12154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11751'. [ 1440.962412][T12165] syzkaller1: entered promiscuous mode [ 1440.967977][T12165] syzkaller1: entered allmulticast mode [ 1441.069430][ T29] audit: type=1800 audit(1772722543.917:9): pid=12168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11756" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2564 res=0 errno=0 [ 1441.151875][T12170] FAULT_INJECTION: forcing a failure. [ 1441.151875][T12170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.188849][T12170] CPU: 1 UID: 0 PID: 12170 Comm: syz.2.11757 Not tainted syzkaller #0 PREEMPT(full) [ 1441.188877][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1441.188889][T12170] Call Trace: [ 1441.188896][T12170] [ 1441.188905][T12170] dump_stack_lvl+0xe8/0x150 [ 1441.188936][T12170] should_fail_ex+0x412/0x560 [ 1441.188963][T12170] _copy_from_iter+0x1d3/0x1670 [ 1441.188992][T12170] ? rcu_is_watching+0x15/0xb0 [ 1441.189024][T12170] ? __pfx__copy_from_iter+0x10/0x10 [ 1441.189055][T12170] ? netlink_sendmsg+0x650/0xb40 [ 1441.189077][T12170] ? skb_put+0x11b/0x210 [ 1441.189111][T12170] netlink_sendmsg+0x6c0/0xb40 [ 1441.189140][T12170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.189163][T12170] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1441.189186][T12170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1441.189206][T12170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.189226][T12170] ____sys_sendmsg+0xa68/0xad0 [ 1441.189258][T12170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1441.189290][T12170] ? import_iovec+0x73/0xa0 [ 1441.189317][T12170] ___sys_sendmsg+0x2a5/0x360 [ 1441.189348][T12170] ? __pfx____sys_sendmsg+0x10/0x10 [ 1441.189405][T12170] ? __fget_files+0x2a/0x420 [ 1441.189430][T12170] ? __fget_files+0x3a0/0x420 [ 1441.189463][T12170] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1441.189492][T12170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1441.189526][T12170] ? __pfx_ksys_write+0x10/0x10 [ 1441.189555][T12170] do_syscall_64+0x14d/0xf80 [ 1441.189574][T12170] ? trace_irq_disable+0x3b/0x150 [ 1441.189598][T12170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.189617][T12170] ? clear_bhb_loop+0x40/0x90 [ 1441.189640][T12170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.189657][T12170] RIP: 0033:0x7f2e0fb9c799 [ 1441.189676][T12170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.189692][T12170] RSP: 002b:00007f2e10acb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.189712][T12170] RAX: ffffffffffffffda RBX: 00007f2e0fe15fa0 RCX: 00007f2e0fb9c799 [ 1441.189726][T12170] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1441.189738][T12170] RBP: 00007f2e10acb090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.189750][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.189761][T12170] R13: 00007f2e0fe16038 R14: 00007f2e0fe15fa0 R15: 00007ffedb70a0d8 [ 1441.189790][T12170] [ 1441.300359][T12172] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11758'. [ 1441.679519][ T10] net_ratelimit: 4 callbacks suppressed [ 1441.679540][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.758843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.923430][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11767'. [ 1441.952901][T12200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11767'. [ 1441.965746][T12203] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1441.985188][T12200] sctp: [Deprecated]: syz.4.11767 (pid 12200) Use of int in max_burst socket option deprecated. [ 1441.985188][T12200] Use struct sctp_assoc_value instead [ 1442.006068][T12203] bridge1: entered allmulticast mode [ 1442.164341][T12213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11772'. [ 1442.285445][T12220] macsec0: entered promiscuous mode [ 1442.614130][T12234] wlan1 speed is unknown, defaulting to 1000 [ 1442.650012][T12234] lo speed is unknown, defaulting to 1000 [ 1442.724802][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.798694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.822088][T12242] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1443.033343][T12250] Cannot find add_set index 2 as target [ 1443.110574][T12253] syzkaller0: entered promiscuous mode [ 1443.121541][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.144158][T12253] syzkaller0: entered allmulticast mode [ 1443.221164][T12257] FAULT_INJECTION: forcing a failure. [ 1443.221164][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.233896][T12257] CPU: 0 UID: 0 PID: 12257 Comm: syz.5.11785 Not tainted syzkaller #0 PREEMPT(full) [ 1443.233921][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1443.233932][T12257] Call Trace: [ 1443.233940][T12257] [ 1443.233948][T12257] dump_stack_lvl+0xe8/0x150 [ 1443.233981][T12257] should_fail_ex+0x412/0x560 [ 1443.234009][T12257] should_failslab+0xa8/0x100 [ 1443.234033][T12257] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 1443.234054][T12257] ? pfn_valid+0x125/0x4c0 [ 1443.234088][T12257] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 1443.234124][T12257] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 1443.234153][T12257] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1443.234195][T12257] ? 0xffffffffa0201654 [ 1443.234237][T12257] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1443.234270][T12257] ? _copy_from_user+0x94/0xb0 [ 1443.234296][T12257] ? bpf_test_init+0x113/0x150 [ 1443.234316][T12257] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1443.234341][T12257] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1443.234378][T12257] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1443.234414][T12257] ? __fget_files+0x2a/0x420 [ 1443.234445][T12257] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1443.234468][T12257] bpf_prog_test_run+0x2c7/0x340 [ 1443.234491][T12257] __sys_bpf+0x643/0x950 [ 1443.234518][T12257] ? __pfx___sys_bpf+0x10/0x10 [ 1443.234564][T12257] ? ksys_write+0x242/0x270 [ 1443.234585][T12257] ? __pfx_ksys_write+0x10/0x10 [ 1443.234611][T12257] __x64_sys_bpf+0x7c/0x90 [ 1443.234636][T12257] do_syscall_64+0x14d/0xf80 [ 1443.234652][T12257] ? trace_irq_disable+0x3b/0x150 [ 1443.234677][T12257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.234695][T12257] ? clear_bhb_loop+0x40/0x90 [ 1443.234718][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.234736][T12257] RIP: 0033:0x7f15bff9c799 [ 1443.234754][T12257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.234770][T12257] RSP: 002b:00007f15c0dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1443.234790][T12257] RAX: ffffffffffffffda RBX: 00007f15c0215fa0 RCX: 00007f15bff9c799 [ 1443.234803][T12257] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1443.234815][T12257] RBP: 00007f15c0dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.234826][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.234837][T12257] R13: 00007f15c0216038 R14: 00007f15c0215fa0 R15: 00007ffcc7eb86a8 [ 1443.234867][T12257] [ 1443.553245][T12265] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11786'. [ 1443.625485][T12258] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.761483][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.825659][T12270] syzkaller0: entered promiscuous mode [ 1443.838679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.850593][T12270] syzkaller0: entered allmulticast mode [ 1443.915860][T12258] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.966311][T12271] tipc: Enabled bearer , priority 0 [ 1443.977869][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11787'. [ 1444.002547][T12269] tipc: Resetting bearer [ 1444.009619][T31798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.018390][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.027149][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.065689][T12269] tipc: Disabling bearer [ 1444.135536][T12258] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.415569][T12258] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.476893][T12286] x_tables: duplicate underflow at hook 3 [ 1444.652880][T12294] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 1444.693155][T31806] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.745766][T31806] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.851557][T31809] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.890615][T31798] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.951414][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11798'. [ 1445.124638][T12306] syzkaller0: left promiscuous mode [ 1445.130711][T12306] syzkaller0: left allmulticast mode [ 1445.218147][T12314] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1445.276938][T12313] netlink: 'syz.2.11804': attribute type 13 has an invalid length. [ 1445.553932][T12324] netlink: 'syz.5.11809': attribute type 9 has an invalid length. [ 1445.561883][T12324] netlink: 'syz.5.11809': attribute type 11 has an invalid length. [ 1445.583073][T12324] netlink: 'syz.5.11809': attribute type 12 has an invalid length. [ 1445.592413][T12324] __nla_validate_parse: 1 callbacks suppressed [ 1445.592432][T12324] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.11809'. [ 1445.631344][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11809'. [ 1445.774443][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11814'. [ 1445.966273][T12344] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11816'. [ 1446.958701][ C1] net_ratelimit: 6 callbacks suppressed [ 1446.958722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.060080][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11827'. [ 1447.088072][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11827'. [ 1447.119382][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.245874][T12391] syzkaller0: entered promiscuous mode [ 1447.252569][T12391] syzkaller0: entered allmulticast mode [ 1447.261766][T12391] tipc: Started in network mode [ 1447.267155][T12391] tipc: Node identity c2bd66259009, cluster identity 4711 [ 1447.275480][T12391] tipc: Enabled bearer , priority 0 [ 1447.297534][T12390] tipc: Resetting bearer [ 1447.377666][T12390] tipc: Disabling bearer [ 1447.607937][T12411] netlink: 'syz.4.11839': attribute type 5 has an invalid length. [ 1447.629223][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11839'. [ 1447.764627][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11842'. [ 1447.998939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.163279][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.185639][T12431] x_tables: duplicate underflow at hook 3 [ 1448.645719][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11852'. [ 1448.891257][T12461] syzkaller1: entered promiscuous mode [ 1448.905147][T12461] syzkaller1: entered allmulticast mode [ 1448.947333][T12463] netlink: 'syz.5.11855': attribute type 8 has an invalid length. [ 1449.038692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.199509][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.209237][ T5466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.269862][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11858'. [ 1449.447000][T12479] tipc: Enabling of bearer rejected, failed to enable media [ 1449.467689][T12479] syzkaller1: entered promiscuous mode [ 1449.473411][T12479] syzkaller1: entered allmulticast mode [ 1449.582630][T12483] x_tables: duplicate entry at hook 1 [ 1449.624746][T12485] vlan5: entered promiscuous mode [ 1449.646437][T12489] netlink: 'syz.2.11864': attribute type 4 has an invalid length. [ 1449.701235][T12488] netlink: 'syz.4.11863': attribute type 13 has an invalid length. [ 1449.725844][T12489] .`: renamed from bond0 [ 1449.903041][T12495] vlan1: entered promiscuous mode [ 1449.919607][T12495] hsr_slave_1: entered promiscuous mode [ 1449.940515][T12495] vlan1: entered allmulticast mode [ 1449.970257][T12495] hsr_slave_1: entered allmulticast mode [ 1450.078687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.239732][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.395650][T12520] netlink: 'syz.0.11873': attribute type 1 has an invalid length. [ 1450.617900][T12529] netlink: 'syz.4.11878': attribute type 4 has an invalid length. [ 1450.652165][T12529] netlink: 'syz.4.11878': attribute type 4 has an invalid length. [ 1450.765945][T12531] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1450.782367][T12531] syzkaller1: linktype set to 825 [ 1450.822778][T12531] netlink: 'syz.5.11879': attribute type 4 has an invalid length. [ 1450.857476][T12531] Cannot find add_set index 3 as target [ 1451.118251][T12538] __nla_validate_parse: 7 callbacks suppressed [ 1451.118271][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11882'. [ 1451.124868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.316278][ T4741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1451.339452][ T4741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1451.351087][ T4741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1451.359564][ T4741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1451.367228][ T4741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1451.504030][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1451.515274][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1451.528014][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1451.539620][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1451.554921][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1451.698182][T12542] wlan1 speed is unknown, defaulting to 1000 [ 1451.780412][T12542] lo speed is unknown, defaulting to 1000 [ 1452.158692][ C1] net_ratelimit: 1 callbacks suppressed [ 1452.158712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.319634][T11239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.449045][T12565] SET target dimension over the limit! [ 1452.493142][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.884878][T12573] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.11894'. [ 1453.198779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.343658][T12588] xt_connbytes: Forcing CT accounting to be enabled [ 1453.526715][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.599544][ T5841] Bluetooth: hci1: command tx timeout [ 1453.794888][T12542] chnl_net:caif_netlink_parms(): no params data found [ 1453.819491][T12601] netlink: 'syz.5.11903': attribute type 4 has an invalid length. [ 1453.886608][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11902'. [ 1454.166912][T12605] syzkaller1: entered promiscuous mode [ 1454.173217][T12605] syzkaller1: entered allmulticast mode [ 1454.239578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.520389][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.527705][T12542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.536383][T12542] bridge_slave_0: entered allmulticast mode [ 1454.560313][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.564847][T12542] bridge_slave_0: entered promiscuous mode [ 1454.624655][T31809] bridge_slave_1: left allmulticast mode [ 1454.634645][T31809] bridge_slave_1: left promiscuous mode [ 1454.658302][T31809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.727933][T31809] bridge_slave_0: left allmulticast mode [ 1454.756085][T31809] bridge_slave_0: left promiscuous mode [ 1454.777963][T31809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.291543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.408996][T11554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.639370][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.679141][ T5841] Bluetooth: hci1: command tx timeout [ 1456.122528][T31809] erspan0 (unregistering): left promiscuous mode [ 1456.170183][T31809] batman_adv: batadv0: Removing interface: gretap1 [ 1456.516887][T31809] bond3 (unregistering): (slave bridge4): Releasing active interface [ 1456.595899][T31809] bond3 (unregistering): (slave bridge5): Releasing active interface [ 1456.678438][T31809] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.708299][T31809] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.723107][T31809] .` (unregistering): Released all slaves [ 1456.736701][T31809] bond1 (unregistering): Released all slaves [ 1456.757843][T31809] bond2 (unregistering): Released all slaves [ 1456.783125][T31809] bond3 (unregistering): Released all slaves [ 1456.822917][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.836742][T12542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.854395][T12542] bridge_slave_1: entered allmulticast mode [ 1456.872685][T12542] bridge_slave_1: entered promiscuous mode [ 1456.885502][T12626] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1457.067604][T31809] : left promiscuous mode [ 1457.155254][T12542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.221709][T12542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.328204][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11926'. [ 1457.358854][ C1] net_ratelimit: 2 callbacks suppressed [ 1457.358872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.378479][T12666] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20004 [ 1457.399478][T31809] tipc: Left network mode [ 1457.406521][T12659] vlan3: entered promiscuous mode [ 1457.486662][T12668] syzkaller0: entered promiscuous mode [ 1457.492479][T12668] syzkaller0: entered allmulticast mode [ 1457.501950][T12661] tipc: Enabled bearer , priority 0 [ 1457.584065][T12542] team0: Port device team_slave_0 added [ 1457.590876][T12671] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11927'. [ 1457.607672][T12654] tipc: Resetting bearer [ 1457.658503][T12654] tipc: Disabling bearer [ 1457.684932][T12542] team0: Port device team_slave_1 added [ 1457.761379][ T5841] Bluetooth: hci1: command tx timeout [ 1457.775685][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.786240][T12673] netlink: 'syz.0.11927': attribute type 1 has an invalid length. [ 1457.944747][T12683] netlink: 'syz.5.11929': attribute type 13 has an invalid length. [ 1457.974060][T12673] bond5: entered promiscuous mode [ 1457.981345][T12673] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1457.995687][T12542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.006355][T12679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11929'. [ 1458.025594][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.052366][T12542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.083988][T12542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.102262][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.157186][T12689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11932'. [ 1458.159342][T12542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.207977][T12684] bond5: (slave bridge0): making interface the new active one [ 1458.217695][T12684] bridge0: entered promiscuous mode [ 1458.228137][T12684] bridge0: left promiscuous mode [ 1458.398737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.482780][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.797645][T12716] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11940'. [ 1458.811199][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.448721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.611852][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11944'. [ 1459.658228][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11944'. [ 1459.839242][ T5841] Bluetooth: hci1: command tx timeout [ 1459.840901][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.922188][ T3949] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1460.029275][ T3949] CPU: 1 UID: 0 PID: 3949 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1460.029302][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1460.029313][ T3949] Call Trace: [ 1460.029321][ T3949] [ 1460.029330][ T3949] dump_stack_lvl+0xe8/0x150 [ 1460.029363][ T3949] dump_header+0xd3/0x4c0 [ 1460.029389][ T3949] oom_kill_process+0x3ab/0x970 [ 1460.029412][ T3949] out_of_memory+0x106c/0x1410 [ 1460.029437][ T3949] ? percpu_ref_put+0x19/0x180 [ 1460.029460][ T3949] ? __pfx___mutex_lock+0x10/0x10 [ 1460.029487][ T3949] ? __pfx_out_of_memory+0x10/0x10 [ 1460.029503][ T3949] ? do_raw_spin_unlock+0xf5/0x210 [ 1460.029531][ T3949] try_charge_memcg+0xc53/0x1560 [ 1460.029551][ T3949] ? __lock_acquire+0x6b5/0x2cf0 [ 1460.029587][ T3949] ? __pfx_try_charge_memcg+0x10/0x10 [ 1460.029604][ T3949] ? xa_load+0x60/0x210 [ 1460.029632][ T3949] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 1460.029657][ T3949] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 1460.029680][ T3949] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 1460.029704][ T3949] __swap_cache_prepare_and_add+0x52a/0x700 [ 1460.029748][ T3949] swap_cache_alloc_folio+0xf1/0x240 [ 1460.029776][ T3949] swap_cluster_readahead+0x53a/0x690 [ 1460.029808][ T3949] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1460.029847][ T3949] ? get_vma_policy+0x27b/0x3c0 [ 1460.029872][ T3949] swapin_readahead+0x196/0xc50 [ 1460.029910][ T3949] ? __pfx_swapin_readahead+0x10/0x10 [ 1460.029937][ T3949] ? swap_table_get+0x1e/0x260 [ 1460.029960][ T3949] ? swap_table_get+0x1e/0x260 [ 1460.029981][ T3949] ? swap_table_get+0x1e/0x260 [ 1460.030004][ T3949] ? swap_table_get+0x216/0x260 [ 1460.030029][ T3949] ? swap_cache_get_folio+0x513/0x520 [ 1460.030060][ T3949] do_swap_page+0x54f/0x58d0 [ 1460.030084][ T3949] ? __lock_acquire+0x6b5/0x2cf0 [ 1460.030126][ T3949] ? do_swap_page+0x12c/0x58d0 [ 1460.030149][ T3949] ? __pfx_do_swap_page+0x10/0x10 [ 1460.030171][ T3949] ? __pte_offset_map+0x1ae/0x240 [ 1460.030199][ T3949] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1460.030228][ T3949] handle_mm_fault+0x12d2/0x3310 [ 1460.030268][ T3949] ? handle_mm_fault+0xee/0x3310 [ 1460.030302][ T3949] ? __pfx_handle_mm_fault+0x10/0x10 [ 1460.030324][ T3949] ? lock_vma_under_rcu+0x45a/0x500 [ 1460.030369][ T3949] do_user_addr_fault+0xa73/0x1340 [ 1460.030401][ T3949] ? rcu_is_watching+0x15/0xb0 [ 1460.030433][ T3949] ? trace_page_fault_user+0x84/0x210 [ 1460.030458][ T3949] exc_page_fault+0x6a/0xc0 [ 1460.030487][ T3949] asm_exc_page_fault+0x26/0x30 [ 1460.030506][ T3949] RIP: 0033:0x7f15bff5cfce [ 1460.030525][ T3949] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1460.030541][ T3949] RSP: 002b:00007ffcc7eb8988 EFLAGS: 00010246 [ 1460.030558][ T3949] RAX: 0000000000000000 RBX: 0000555561cee500 RCX: 00007f15bff5cfce [ 1460.030571][ T3949] RDX: 00007ffcc7eb89e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1460.030583][ T3949] RBP: 00007ffcc7eb8a4c R08: 0000000000000000 R09: 0000000000000000 [ 1460.030594][ T3949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1460.030605][ T3949] R13: 00000000000927c0 R14: 0000000000164426 R15: 00007ffcc7eb8aa0 [ 1460.030635][ T3949] [ 1460.030643][ T3949] memory: usage 307200kB, limit 307200kB, failcnt 293 [ 1460.388790][ T3949] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 1460.396820][ T3949] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 1460.438738][ T3949] Memory cgroup stats for /syz5: [ 1460.438865][ T3949] cache 0 [ 1460.462757][ T3949] rss 0 [ 1460.465562][ T3949] rss_huge 0 [ 1460.479484][ T3949] shmem 0 [ 1460.481080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.482463][ T3949] mapped_file 0 [ 1460.482475][ T3949] dirty 0 [ 1460.509371][ T3949] writeback 0 [ 1460.512750][ T3949] workingset_refault_anon 13 [ 1460.517347][ T3949] workingset_refault_file 0 [ 1460.539028][ T3949] swap 200704 [ 1460.542360][ T3949] swapcached 237568 [ 1460.546181][ T3949] pgpgin 148611 [ 1460.569340][ T3949] pgpgout 148602 [ 1460.572998][ T3949] pgfault 268979 [ 1460.576619][ T3949] pgmajfault 4 [ 1460.581981][ T3949] inactive_anon 24576 [ 1460.585995][ T3949] active_anon 12288 [ 1460.628898][ T3949] inactive_file 0 [ 1460.639740][ T3949] active_file 0 [ 1460.648659][ T3949] unevictable 0 [ 1460.662412][ T3949] hierarchical_memory_limit 314572800 [ 1460.678127][ T3949] hierarchical_memsw_limit 9223372036854771712 [ 1460.708701][ T3949] total_cache 0 [ 1460.712215][ T3949] total_rss 0 [ 1460.715516][ T3949] total_rss_huge 0 [ 1460.738658][ T3949] total_shmem 0 [ 1460.742348][ T3949] total_mapped_file 0 [ 1460.746347][ T3949] total_dirty 0 [ 1460.768671][ T3949] total_writeback 0 [ 1460.772537][ T3949] total_workingset_refault_anon 13 [ 1460.798184][ T3949] total_workingset_refault_file 0 [ 1460.818527][ T3949] total_swap 200704 [ 1460.830938][ T3949] total_swapcached 237568 [ 1460.835310][ T3949] total_pgpgin 148611 [ 1460.860499][ T3949] total_pgpgout 148602 [ 1460.864792][ T3949] total_pgfault 268979 [ 1460.874957][ T3949] total_pgmajfault 4 [ 1460.879548][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.887853][ T3949] total_inactive_anon 24576 [ 1460.905448][ T3949] total_active_anon 12288 [ 1460.915987][ T3949] total_inactive_file 0 [ 1460.928672][ T3949] total_active_file 0 [ 1460.932691][ T3949] total_unevictable 0 [ 1460.957190][ T3949] anon_cost 0 [ 1460.967364][ T3949] file_cost 0 [ 1460.977742][ T3949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.11943,pid=12721,uid=0 [ 1460.999486][ T3949] Memory cgroup out of memory: Killed process 12721 (syz.5.11943) total-vm:112936kB, anon-rss:1236kB, file-rss:31124kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 1461.529825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.558701][ C1] net_ratelimit: 2 callbacks suppressed [ 1462.558721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.962371][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.144962][ T31] oom_reaper: reaped process 12721 (syz.5.11943), now anon-rss:0kB, file-rss:29948kB, shmem-rss:0kB [ 1463.602510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.003151][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.010129][T12705] bridge0: entered promiscuous mode [ 1464.017478][T12705] bridge0: entered allmulticast mode [ 1464.040655][T12707] xfrm0: Caught tx_queue_len zero misconfig [ 1464.049611][T12730] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11945'. [ 1464.160153][T12542] hsr_slave_0: entered promiscuous mode [ 1464.173194][T12542] hsr_slave_1: entered promiscuous mode [ 1464.188872][T12542] debugfs: 'hsr0' already exists in 'hsr' [ 1464.199171][T12542] Cannot create hsr debugfs directory [ 1464.423605][T12743] vlan5: entered promiscuous mode [ 1464.562441][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.596095][T12755] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1464.635868][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11955'. [ 1464.648684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.810757][T12765] netlink: 'syz.0.11956': attribute type 10 has an invalid length. [ 1465.044379][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.496558][T12780] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1465.531350][T12780] syzkaller1: linktype set to 825 [ 1465.550345][T12780] netlink: 'syz.0.11962': attribute type 4 has an invalid length. [ 1465.569763][T31809] hsr_slave_0: left promiscuous mode [ 1465.576511][T31809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.590891][T31809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.602944][T12783] Cannot find add_set index 3 as target [ 1465.678780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.871679][T12787] Cannot find add_set index 2 as target [ 1466.080377][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.660000][T12803] wlan1 speed is unknown, defaulting to 1000 [ 1466.717296][T12803] lo speed is unknown, defaulting to 1000 [ 1466.745467][T12805] syzkaller1: entered promiscuous mode [ 1466.765162][T12805] syzkaller1: entered allmulticast mode [ 1467.043749][T31798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.166581][T12815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11975'. [ 1467.217434][T12815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11975'. [ 1467.247953][T12815] netlink: 11 bytes leftover after parsing attributes in process `syz.4.11975'. [ 1467.384473][T31809] IPVS: stop unused estimator thread 0... [ 1467.411848][T12542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1467.483079][T12542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1467.531327][T12542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1467.568464][T12542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1467.603605][ T24] net_ratelimit: 1 callbacks suppressed [ 1467.603623][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.806371][T12828] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1468.078705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.161904][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.394027][T12542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.503074][T12542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.535808][T31809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.543022][T31809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.600404][T31809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.607625][T31809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.664129][T12864] netlink: 'syz.4.11985': attribute type 13 has an invalid length. [ 1468.690310][T12864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11985'. [ 1468.717854][T12866] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11986'. [ 1468.884901][T12874] netlink: 'syz.5.11988': attribute type 1 has an invalid length. [ 1469.076897][T12874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1469.118729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.199362][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.228344][T12875] bond5: (slave veth13): Enslaving as an active interface with a down link [ 1469.253096][T12890] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11991'. [ 1469.315165][T12884] bond5: (slave veth15): Enslaving as an active interface with a down link [ 1469.428000][T12542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.490470][T12900] FAULT_INJECTION: forcing a failure. [ 1469.490470][T12900] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.534263][T12900] CPU: 0 UID: 0 PID: 12900 Comm: syz.0.11996 Not tainted syzkaller #0 PREEMPT(full) [ 1469.534291][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1469.534303][T12900] Call Trace: [ 1469.534311][T12900] [ 1469.534319][T12900] dump_stack_lvl+0xe8/0x150 [ 1469.534350][T12900] should_fail_ex+0x412/0x560 [ 1469.534380][T12900] should_failslab+0xa8/0x100 [ 1469.534405][T12900] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1469.534436][T12900] ? __alloc_skb+0x1d0/0x7d0 [ 1469.534460][T12900] ? __local_bh_enable_ip+0xd0/0x130 [ 1469.534488][T12900] __alloc_skb+0x1d0/0x7d0 [ 1469.534518][T12900] netlink_dump+0x1ef/0xe80 [ 1469.534546][T12900] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 1469.534575][T12900] ? __pfx_netlink_dump+0x10/0x10 [ 1469.534596][T12900] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1469.534630][T12900] ? genl_start+0x581/0x6c0 [ 1469.534658][T12900] __netlink_dump_start+0x5cb/0x7e0 [ 1469.534688][T12900] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1469.534719][T12900] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1469.534745][T12900] ? genl_get_cmd+0x691/0x930 [ 1469.534776][T12900] ? __pfx_genl_start+0x10/0x10 [ 1469.534800][T12900] ? __pfx_genl_dumpit+0x10/0x10 [ 1469.534824][T12900] ? __pfx_genl_done+0x10/0x10 [ 1469.534865][T12900] genl_rcv_msg+0x5e8/0x7a0 [ 1469.534898][T12900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1469.534924][T12900] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 1469.534946][T12900] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 1469.534968][T12900] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 1469.534991][T12900] ? __lock_acquire+0x6b5/0x2cf0 [ 1469.535025][T12900] netlink_rcv_skb+0x232/0x4b0 [ 1469.535049][T12900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1469.535077][T12900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1469.535117][T12900] ? down_read+0x272/0x2e0 [ 1469.535144][T12900] ? genl_rcv+0xd/0x40 [ 1469.535171][T12900] genl_rcv+0x28/0x40 [ 1469.535196][T12900] netlink_unicast+0x80f/0x9b0 [ 1469.535225][T12900] ? __pfx_netlink_unicast+0x10/0x10 [ 1469.535247][T12900] ? netlink_sendmsg+0x650/0xb40 [ 1469.535268][T12900] ? skb_put+0x11b/0x210 [ 1469.535295][T12900] netlink_sendmsg+0x813/0xb40 [ 1469.535328][T12900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1469.535354][T12900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1469.535379][T12900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1469.535401][T12900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1469.535423][T12900] ____sys_sendmsg+0xa68/0xad0 [ 1469.535458][T12900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1469.535494][T12900] ? import_iovec+0x73/0xa0 [ 1469.535524][T12900] ___sys_sendmsg+0x2a5/0x360 [ 1469.535556][T12900] ? __pfx____sys_sendmsg+0x10/0x10 [ 1469.535618][T12900] ? __fget_files+0x2a/0x420 [ 1469.535641][T12900] ? __fget_files+0x3a0/0x420 [ 1469.535676][T12900] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1469.535705][T12900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1469.535741][T12900] ? __pfx_ksys_write+0x10/0x10 [ 1469.535772][T12900] do_syscall_64+0x14d/0xf80 [ 1469.535789][T12900] ? trace_irq_disable+0x3b/0x150 [ 1469.535814][T12900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.535833][T12900] ? clear_bhb_loop+0x40/0x90 [ 1469.535856][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.535873][T12900] RIP: 0033:0x7f6f2219c799 [ 1469.535892][T12900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1469.535907][T12900] RSP: 002b:00007f6f2303d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1469.535927][T12900] RAX: ffffffffffffffda RBX: 00007f6f22415fa0 RCX: 00007f6f2219c799 [ 1469.535941][T12900] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1469.535953][T12900] RBP: 00007f6f2303d090 R08: 0000000000000000 R09: 0000000000000000 [ 1469.535964][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1469.535975][T12900] R13: 00007f6f22416038 R14: 00007f6f22415fa0 R15: 00007ffc6563d108 [ 1469.536005][T12900] [ 1469.928530][T12542] veth0_vlan: entered promiscuous mode [ 1469.965336][T12542] veth1_vlan: entered promiscuous mode [ 1470.022446][T12542] veth0_macvtap: entered promiscuous mode [ 1470.043169][T12542] veth1_macvtap: entered promiscuous mode [ 1470.084229][T12542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.159091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.282695][T12542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.290985][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.320721][T31801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.349858][T31801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.431600][T31801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.483304][T31801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.522396][T12909] syzkaller0: Caught tx_queue_len zero misconfig [ 1470.551131][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11998'. [ 1470.649473][T16418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.716576][T12916] syzkaller0: entered promiscuous mode [ 1470.731281][T12916] syzkaller0: entered allmulticast mode [ 1470.740604][T12921] tipc: Enabling of bearer rejected, already enabled [ 1470.824528][T12924] netlink: 'syz.3.12002': attribute type 5 has an invalid length. [ 1470.868464][T12922] lo speed is unknown, defaulting to 1000 [ 1470.888378][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12002'. [ 1470.947045][T12926] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1470.978239][T12926] bond4 (unregistering): Released all slaves [ 1471.005856][T12922] lo speed is unknown, defaulting to 1000 [ 1471.039975][T12922] lo speed is unknown, defaulting to 1000 [ 1471.080236][T31801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.087458][T12922] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1471.088176][T31801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.106089][T12931] syzkaller0: entered promiscuous mode [ 1471.124143][T12931] syzkaller0: entered allmulticast mode [ 1471.198677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.209568][T12922] lo speed is unknown, defaulting to 1000 [ 1471.217072][T12922] lo speed is unknown, defaulting to 1000 [ 1471.253432][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12006'. [ 1471.277633][T12922] lo speed is unknown, defaulting to 1000 [ 1471.297782][T12922] lo speed is unknown, defaulting to 1000 [ 1471.304505][T31804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.316312][T31804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.400489][T12922] lo speed is unknown, defaulting to 1000 [ 1471.417708][T12922] lo speed is unknown, defaulting to 1000 [ 1471.451543][T12922] lo speed is unknown, defaulting to 1000 [ 1471.480566][T12922] lo speed is unknown, defaulting to 1000 [ 1471.696710][T12947] vlan5: entered promiscuous mode [ 1471.731934][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12009'. [ 1472.159428][T12971] netlink: 'syz.2.12013': attribute type 1 has an invalid length. [ 1472.264295][T12977] syzkaller0: entered promiscuous mode [ 1472.270377][T12977] syzkaller0: entered allmulticast mode [ 1472.298149][T12977] tipc: Enabled bearer , priority 0 [ 1472.406227][T12976] tipc: Resetting bearer [ 1472.544458][T12976] tipc: Disabling bearer [ 1472.576746][T12973] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.633941][T12973] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.797892][T12973] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.824617][T12973] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.917348][T12993] bridge_slave_0: entered promiscuous mode [ 1472.943092][T12993] net_ratelimit: 3 callbacks suppressed [ 1472.943109][T12993] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1473.047830][T12973] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1473.059397][T12973] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.091386][T12999] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1473.154386][T12973] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1473.201173][T12973] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.278941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.425782][T31806] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.452178][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.472957][T31806] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.534423][T31806] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.558126][T31806] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.623146][T31798] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.640323][T31798] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.676030][T31798] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.693977][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.730186][T31798] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.825188][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12035'. [ 1473.865914][T13028] vlan4: entered promiscuous mode [ 1473.926054][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12036'. [ 1473.975731][T13033] vlan5: entered promiscuous mode [ 1474.200346][T13043] FAULT_INJECTION: forcing a failure. [ 1474.200346][T13043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1474.241818][T13043] CPU: 1 UID: 0 PID: 13043 Comm: syz.5.12042 Not tainted syzkaller #0 PREEMPT(full) [ 1474.241845][T13043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1474.241857][T13043] Call Trace: [ 1474.241865][T13043] [ 1474.241873][T13043] dump_stack_lvl+0xe8/0x150 [ 1474.241905][T13043] should_fail_ex+0x412/0x560 [ 1474.241932][T13043] _copy_to_user+0x31/0xb0 [ 1474.241961][T13043] simple_read_from_buffer+0xe1/0x170 [ 1474.241991][T13043] proc_fail_nth_read+0x1bb/0x230 [ 1474.242020][T13043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1474.242047][T13043] ? rw_verify_area+0x2a6/0x4d0 [ 1474.242064][T13043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1474.242090][T13043] vfs_read+0x20c/0xa70 [ 1474.242106][T13043] ? fdget_pos+0x246/0x320 [ 1474.242158][T13043] ? __pfx___mutex_lock+0x10/0x10 [ 1474.242179][T13043] ? __pfx_vfs_read+0x10/0x10 [ 1474.242197][T13043] ? __fget_files+0x2a/0x420 [ 1474.242225][T13043] ? __fget_files+0x3a0/0x420 [ 1474.242247][T13043] ? __fget_files+0x2a/0x420 [ 1474.242280][T13043] ksys_read+0x150/0x270 [ 1474.242301][T13043] ? __pfx_ksys_read+0x10/0x10 [ 1474.242331][T13043] do_syscall_64+0x14d/0xf80 [ 1474.242347][T13043] ? trace_irq_disable+0x3b/0x150 [ 1474.242372][T13043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.242391][T13043] ? clear_bhb_loop+0x40/0x90 [ 1474.242414][T13043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.242432][T13043] RIP: 0033:0x7f15bff5cfce [ 1474.242451][T13043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1474.242467][T13043] RSP: 002b:00007f15c0dd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1474.242486][T13043] RAX: ffffffffffffffda RBX: 00007f15c0dd66c0 RCX: 00007f15bff5cfce [ 1474.242500][T13043] RDX: 000000000000000f RSI: 00007f15c0dd60a0 RDI: 0000000000000004 [ 1474.242512][T13043] RBP: 00007f15c0dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.242524][T13043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.242535][T13043] R13: 00007f15c0216038 R14: 00007f15c0215fa0 R15: 00007ffcc7eb86a8 [ 1474.242565][T13043] [ 1474.318766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.485062][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.503550][T13049] lo: Caught tx_queue_len zero misconfig [ 1475.125601][T13070] ip6tnl1: entered allmulticast mode [ 1475.161093][T13070] syzkaller1: entered promiscuous mode [ 1475.169512][T13070] syzkaller1: entered allmulticast mode [ 1475.356609][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12059'. [ 1475.365920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.519898][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.902946][T13110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1475.904279][T13105] vlan3: entered promiscuous mode [ 1475.910229][T13110] IPv6: NLM_F_CREATE should be set when creating new route [ 1475.915553][T13105] veth0: entered promiscuous mode [ 1475.922628][T13110] IPv6: NLM_F_CREATE should be set when creating new route [ 1475.922656][T13110] IPv6: NLM_F_CREATE should be set when creating new route [ 1475.964457][T13110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1475.999648][T13108] netlink: 'syz.4.12067': attribute type 1 has an invalid length. [ 1476.019310][T13114] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12068'. [ 1476.246137][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.256253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.548247][T13135] netlink: 'syz.2.12073': attribute type 1 has an invalid length. [ 1476.657590][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12073'. [ 1476.705920][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12073'. [ 1476.746366][T13142] bond0: (slave bond_slave_1): Releasing backup interface [ 1477.555921][T13174] wlan1 speed is unknown, defaulting to 1000 [ 1477.569189][T13174] lo speed is unknown, defaulting to 1000 [ 1477.772660][T13174] lo speed is unknown, defaulting to 1000 [ 1478.478688][ C0] net_ratelimit: 5 callbacks suppressed [ 1478.478706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.599223][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12095'. [ 1478.799118][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.871522][T13219] netlink: 'syz.2.12101': attribute type 5 has an invalid length. [ 1478.918454][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12101'. [ 1479.732575][T13251] SET target dimension over the limit! [ 1479.760926][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.842249][T31798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.851694][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.070839][T13258] syzkaller0: entered promiscuous mode [ 1480.097938][T13258] syzkaller0: entered allmulticast mode [ 1480.127725][T13263] netlink: 'syz.5.12113': attribute type 4 has an invalid length. [ 1480.142940][T13257] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1480.156475][T13257] syzkaller1: linktype set to 825 [ 1480.186652][T13257] Cannot find add_set index 3 as target [ 1480.635428][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12118'. [ 1480.878742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.889702][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.185504][T13293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12120'. [ 1481.337587][T13311] netlink: 'syz.2.12120': attribute type 1 has an invalid length. [ 1481.817344][ T4741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1481.841346][ T4741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1481.850989][ T4741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1481.859971][ T4741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1481.867750][ T4741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1481.900863][T13329] syzkaller0: entered promiscuous mode [ 1481.918793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.928161][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.936840][T13329] syzkaller0: entered allmulticast mode [ 1482.040405][T13326] tipc: Enabled bearer , priority 0 [ 1482.107074][T13325] tipc: Resetting bearer [ 1482.202321][T13325] tipc: Disabling bearer [ 1482.295197][ T3949] bridge0: port 3(syz_tun) entered disabled state [ 1482.351063][ T3949] syz_tun (unregistering): left allmulticast mode [ 1482.357538][ T3949] syz_tun (unregistering): left promiscuous mode [ 1482.378179][ T3949] bridge0: port 3(syz_tun) entered disabled state [ 1482.425978][T13327] wlan1 speed is unknown, defaulting to 1000 [ 1482.497545][T13327] lo speed is unknown, defaulting to 1000 [ 1482.516496][T31798] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.632130][T13340] syzkaller1: entered promiscuous mode [ 1482.638274][T13340] syzkaller1: entered allmulticast mode [ 1482.706654][T31798] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.757266][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12138'. [ 1482.785089][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12138'. [ 1482.799233][T11236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.887024][T31798] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1483.050075][T31798] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1483.153285][T13327] lo speed is unknown, defaulting to 1000 [ 1483.596078][T13382] wlan1 speed is unknown, defaulting to 1000 [ 1483.617731][T31798] bridge_slave_1: left allmulticast mode [ 1483.641939][T31798] bridge_slave_1: left promiscuous mode [ 1483.663274][T31798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.712145][T31798] bridge_slave_0: left allmulticast mode [ 1483.728376][T31798] bridge_slave_0: left promiscuous mode [ 1483.747274][T31798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.806566][T31798] dvmrp0: left allmulticast mode [ 1483.920658][ T5841] Bluetooth: hci2: command tx timeout [ 1483.998719][ C0] net_ratelimit: 2 callbacks suppressed [ 1483.998738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.013684][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.266066][T31798] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1484.340683][T13399] mpoa:mpoad_close: () going down [ 1484.495981][T31798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.513159][T31798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.524637][T31798] bond0 (unregistering): Released all slaves [ 1484.539832][T31798] bond1 (unregistering): Released all slaves [ 1484.563473][T31798] bond2 (unregistering): Released all slaves [ 1484.584625][T31798] bond3 (unregistering): Released all slaves [ 1484.607864][T31798] bond4 (unregistering): Released all slaves [ 1484.633611][T31798] bond5 (unregistering): (slave veth13): Releasing active interface [ 1484.648089][T31798] bond5 (unregistering): (slave veth15): Releasing active interface [ 1484.666674][T31798] bond5 (unregistering): Released all slaves [ 1484.692260][T13382] lo speed is unknown, defaulting to 1000 [ 1484.703162][T13402] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12150'. [ 1484.966925][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.975879][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1484.999618][T31798] tipc: Left network mode [ 1485.028216][T13411] SET target dimension over the limit! [ 1485.038763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.059623][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.112474][T13327] chnl_net:caif_netlink_parms(): no params data found [ 1485.457054][T13425] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.12158'. [ 1485.507015][T13382] lo speed is unknown, defaulting to 1000 [ 1485.558343][T13431] netlink: 'syz.4.12159': attribute type 10 has an invalid length. [ 1485.721052][T13327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.728209][T13327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.766494][T13327] bridge_slave_0: entered allmulticast mode [ 1485.788393][T13327] bridge_slave_0: entered promiscuous mode [ 1485.821516][T13327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.839144][T16418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.842488][T13327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.869847][T13327] bridge_slave_1: entered allmulticast mode [ 1485.887828][T13327] bridge_slave_1: entered promiscuous mode [ 1485.999209][ T5841] Bluetooth: hci2: command tx timeout [ 1486.046039][T13327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.090998][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.091683][T13327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.147147][T13448] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12164'. [ 1486.210705][T13327] team0: Port device team_slave_0 added [ 1486.220474][T13327] team0: Port device team_slave_1 added [ 1486.316669][T13327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.340532][T13327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.433817][T13327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.519824][T13327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.526975][T13327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.615311][T13327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.790847][T13327] hsr_slave_0: entered promiscuous mode [ 1486.797839][T13327] hsr_slave_1: entered promiscuous mode [ 1486.806365][T13327] debugfs: 'hsr0' already exists in 'hsr' [ 1486.812757][T13327] Cannot create hsr debugfs directory [ 1487.006399][T13466] block nbd4: not configured, cannot reconfigure [ 1487.119245][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.422743][T13482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12172'. [ 1488.089144][ T5841] Bluetooth: hci2: command tx timeout [ 1488.159534][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.248218][T13327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1488.286197][T13327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1488.387290][T13327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1488.420411][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12182'. [ 1488.436320][T13327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1488.526036][T13510] vlan2: entered promiscuous mode [ 1488.542648][T13510] gretap0: entered promiscuous mode [ 1488.914279][T31798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.951798][T31798] batman_adv: batadv0: Interface deactivated: dummy0 [ 1488.970084][T31798] batman_adv: batadv0: Removing interface: dummy0 [ 1489.219640][ T9943] net_ratelimit: 1 callbacks suppressed [ 1489.219658][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.250268][T13538] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12187'. [ 1489.413238][T13543] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.12188'. [ 1489.440810][T31796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.662371][T13551] x_tables: duplicate underflow at hook 3 [ 1489.938696][T13553] syzkaller0: left promiscuous mode [ 1489.951967][T13553] syzkaller0: left allmulticast mode [ 1490.046701][T13559] erspan0: entered promiscuous mode [ 1490.064163][T13559] batadv0: entered promiscuous mode [ 1490.091891][T13559] debugfs: 'hsr1' already exists in 'hsr' [ 1490.097671][T13559] Cannot create hsr debugfs directory [ 1490.152792][T13327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.170934][ T5841] Bluetooth: hci2: command tx timeout [ 1490.273047][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.338499][T13327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.384256][T31810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.391477][T31810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.435835][T13565] wlan1 speed is unknown, defaulting to 1000 [ 1490.451605][T31810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.458844][T31810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.478706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.518166][T13565] lo speed is unknown, defaulting to 1000 [ 1490.552528][T13327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1490.733238][T31798] IPVS: stop unused estimator thread 0... [ 1491.280053][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.381994][T13327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.518682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.833342][T13599] wlan1 speed is unknown, defaulting to 1000 [ 1491.919131][T11236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.960706][T13599] lo speed is unknown, defaulting to 1000 [ 1492.319403][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.323845][T13607] syzkaller1: entered promiscuous mode [ 1492.340377][T13607] syzkaller1: entered allmulticast mode [ 1492.342665][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12211'. [ 1492.362918][T13617] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1492.558914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.850502][T13327] veth0_vlan: entered promiscuous mode [ 1492.987924][T13327] veth1_vlan: entered promiscuous mode [ 1493.129249][T13327] veth0_macvtap: entered promiscuous mode [ 1493.168070][T13327] veth1_macvtap: entered promiscuous mode [ 1493.234406][T13327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.276045][T13327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.341190][T31796] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.359402][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.371839][T31796] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.413211][T31796] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.452882][T31796] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.790401][T13651] xt_ecn: cannot match TCP bits for non-tcp packets [ 1493.818500][T31806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.830805][T31806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.980691][T13651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.987999][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.017884][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12225'. [ 1494.098483][T13651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.117613][T13651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.312127][T13651] macsec0: left promiscuous mode [ 1494.374061][T31807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.400123][ T10] net_ratelimit: 1 callbacks suppressed [ 1494.400140][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.449241][T31807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.531134][T31798] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1494.547662][T31798] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.576283][T31798] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1494.596091][T31798] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.638726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.959117][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.088022][T13686] netlink: 'syz.3.12227': attribute type 9 has an invalid length. [ 1495.107233][T13686] netlink: 'syz.3.12227': attribute type 6 has an invalid length. [ 1495.442051][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.678939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.488171][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.729344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.525058][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.765262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.014767][T16418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.487723][T31798] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.496881][T31798] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.559703][T31798] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.568194][T31798] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.873994][T13716] team0 (unregistering): Port device team_slave_0 removed [ 1498.944627][T13716] team0 (unregistering): Port device team_slave_1 removed [ 1499.020233][ T4741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1499.077209][ T4741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1499.089837][ T4741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1499.097916][ T4741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1499.107675][ T4741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1499.172010][T13720] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1499.214396][T13720] bond4 (unregistering): Released all slaves [ 1499.279606][T13733] Bluetooth: MGMT ver 1.23 [ 1499.390840][T13721] wlan1 speed is unknown, defaulting to 1000 [ 1499.421030][T13721] lo speed is unknown, defaulting to 1000 [ 1499.534242][T31796] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.599433][T27588] net_ratelimit: 2 callbacks suppressed [ 1499.599452][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.662294][T31796] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.786294][T13742] tipc: Enabled bearer , priority 0 [ 1499.807332][T13739] tipc: Disabling bearer [ 1499.838679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.852492][T31796] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.944431][T31796] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.262292][T13757] netlink: 'syz.5.12248': attribute type 3 has an invalid length. [ 1500.429558][T31796] pimreg3: left allmulticast mode [ 1500.639618][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.878739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.931568][T13777] Cannot find add_set index 2 as target [ 1501.039269][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.063825][T31796] erspan0 (unregistering): left promiscuous mode [ 1501.124648][T31796] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1501.188488][T31796] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1501.200807][ T5841] Bluetooth: hci3: command tx timeout [ 1501.491245][T31796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.506462][T31796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.522394][T31796] bond0 (unregistering): Released all slaves [ 1501.537987][T31796] bond1 (unregistering): Released all slaves [ 1501.559487][T31796] bond2 (unregistering): Released all slaves [ 1501.582449][T31796] bond3 (unregistering): Released all slaves [ 1501.624792][T31796] bond4 (unregistering): Released all slaves [ 1501.648225][T31796] bond5 (unregistering): Released all slaves [ 1501.677193][T31796] bond6 (unregistering): Released all slaves [ 1501.684766][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.752786][T13759] vlan2: entered promiscuous mode [ 1501.772607][T13759] vlan2: entered allmulticast mode [ 1501.777784][T13759] hsr_slave_1: entered allmulticast mode [ 1501.842265][T13768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12253'. [ 1501.913439][T31796] tipc: Left network mode [ 1501.918960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.642731][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12266'. [ 1502.655755][T13819] xt_TCPMSS: Only works on TCP SYN packets [ 1502.707862][T13822] syz_tun: entered allmulticast mode [ 1502.729325][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.851114][T13810] tipc: Started in network mode [ 1502.897010][T13810] tipc: Node identity ac1414aa, cluster identity 4711 [ 1502.917358][T13810] tipc: Enabled bearer , priority 10 [ 1502.958738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.080337][T13802] syz_tun: left allmulticast mode [ 1503.088053][T13721] chnl_net:caif_netlink_parms(): no params data found [ 1503.193140][T13834] geneve1: entered promiscuous mode [ 1503.284110][ T5841] Bluetooth: hci3: command tx timeout [ 1503.763313][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.846460][T13855] x_tables: duplicate underflow at hook 3 [ 1504.040735][T13721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.047996][T13721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.076307][T13721] bridge_slave_0: entered allmulticast mode [ 1504.095690][T13721] bridge_slave_0: entered promiscuous mode [ 1504.116752][T13869] ip6t_srh: unknown srh match flags 4000 [ 1504.122095][T13721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.140301][T13721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.153305][T13721] bridge_slave_1: entered allmulticast mode [ 1504.171807][T13721] bridge_slave_1: entered promiscuous mode [ 1504.192616][ T10] tipc: Node number set to 2886997162 [ 1504.402387][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12284'. [ 1504.426131][T13880] vlan0: entered promiscuous mode [ 1504.483291][T13721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.563056][T13721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.734293][T13721] team0: Port device team_slave_0 added [ 1504.773151][T13721] team0: Port device team_slave_1 added [ 1504.803731][ T9943] net_ratelimit: 2 callbacks suppressed [ 1504.803752][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.847326][T13894] netlink: 'syz.2.12290': attribute type 4 has an invalid length. [ 1505.001742][T13721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.019478][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.038983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.088333][T13721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.150883][T13721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.166547][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.248768][T13721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.358960][ T5841] Bluetooth: hci3: command tx timeout [ 1505.517341][T13721] hsr_slave_0: entered promiscuous mode [ 1505.543945][T13721] hsr_slave_1: entered promiscuous mode [ 1505.564111][T13721] debugfs: 'hsr0' already exists in 'hsr' [ 1505.582412][T13721] Cannot create hsr debugfs directory [ 1505.615767][T31796] hsr_slave_0: left promiscuous mode [ 1505.623911][T31796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.635221][T31796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.647171][T31796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.657684][T31796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.676055][T31796] dummy0: left allmulticast mode [ 1505.683456][T31796] veth1_macvtap: left promiscuous mode [ 1505.689902][T31796] veth1_vlan: left promiscuous mode [ 1505.695754][T31796] veth0_vlan: left promiscuous mode [ 1505.842236][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.078936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.665130][T13917] wg1: entered promiscuous mode [ 1506.682482][T13917] wg1: entered allmulticast mode [ 1506.880035][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.118716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.127022][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.271540][T13939] netlink: 204 bytes leftover after parsing attributes in process `syz.2.12305'. [ 1507.293977][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12305'. [ 1507.406492][T13939] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12305'. [ 1507.439349][ T5841] Bluetooth: hci3: command tx timeout [ 1507.549847][T31796] IPVS: stop unused estimator thread 0... [ 1507.884898][T13960] dummy0: entered promiscuous mode [ 1507.923191][T13960] vlan3: entered promiscuous mode [ 1507.952917][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.158956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.193176][T13963] syzkaller1: entered promiscuous mode [ 1508.216226][T13963] syzkaller1: entered allmulticast mode [ 1508.231178][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12315'. [ 1508.294170][T13969] Cannot find add_set index 0 as target [ 1508.303666][T13967] vlan4: entered promiscuous mode [ 1508.433946][T13721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1508.476076][T13973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1508.483712][T13973] IPv6: NLM_F_CREATE should be set when creating new route [ 1508.504044][T13721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1508.560240][T13721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1508.579628][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12318'. [ 1508.610572][T13721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1508.620255][T13976] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.12320'. [ 1508.660695][T13973] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12318'. [ 1508.927277][T13721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.941390][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12324'. [ 1508.960286][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.067294][T14000] xt_ecn: cannot match TCP bits for non-tcp packets [ 1509.086270][T14000] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.134882][T13721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.157198][T31796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.164424][T31796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.218877][T14000] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.258485][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12328'. [ 1509.271073][T31806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.278489][T31806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.359523][T14000] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.427468][T14011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12331'. [ 1509.467773][T14000] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.592987][T14013] : entered promiscuous mode [ 1509.653861][T31806] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.665251][T14014] netlink: 'syz.5.12332': attribute type 13 has an invalid length. [ 1509.719109][T14014] netlink: 'syz.5.12332': attribute type 17 has an invalid length. [ 1509.751237][T31801] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.859073][T14014] net_ratelimit: 1 callbacks suppressed [ 1509.859085][T14014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1509.967864][T31810] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.995830][T31810] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.005969][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.119179][T14030] netlink: 'syz.3.12339': attribute type 3 has an invalid length. [ 1510.158961][T11236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.238800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.336859][T13721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.522223][T13721] veth0_vlan: entered promiscuous mode [ 1510.583110][T13721] veth1_vlan: entered promiscuous mode [ 1510.698090][T13721] veth0_macvtap: entered promiscuous mode [ 1510.745807][T13721] veth1_macvtap: entered promiscuous mode [ 1510.802396][T13721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.865107][T13721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.922889][T31801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.969386][T31810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.010868][T31810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.041368][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.061011][T31810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.076076][T14062] xt_connbytes: Forcing CT accounting to be enabled [ 1511.279047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.388250][T31796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.417609][T31796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.621174][T14070] vlan4: entered promiscuous mode [ 1511.663577][T31801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.676746][T31801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.953812][T14061] team0 (unregistering): Port device team_slave_0 removed [ 1512.003683][T14061] team0 (unregistering): Port device team_slave_1 removed [ 1512.086004][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.318774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.408507][T14097] wlan1 speed is unknown, defaulting to 1000 [ 1512.503757][T14097] lo speed is unknown, defaulting to 1000 [ 1512.612818][ T4741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1512.614273][T14105] __nla_validate_parse: 3 callbacks suppressed [ 1512.614296][T14105] netlink: 192 bytes leftover after parsing attributes in process `syz.0.12362'. [ 1512.652436][ T4741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1512.689420][ T4741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1512.713971][ T4741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1512.743100][ T4741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1512.979233][T14104] wlan1 speed is unknown, defaulting to 1000 [ 1513.119555][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.200565][T16418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.433499][T31807] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.548020][T31807] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.645866][T14104] lo speed is unknown, defaulting to 1000 [ 1513.692275][T31807] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.833511][T31807] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1514.212240][T14134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12375'. [ 1514.236367][T31807] dummy0: left allmulticast mode [ 1514.258643][T31807] bridge0: port 3(dummy0) entered disabled state [ 1514.330482][T31807] bridge_slave_1: left promiscuous mode [ 1514.336405][T31807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.425035][T31807] bridge_slave_0: left allmulticast mode [ 1514.449335][T31807] bridge_slave_0: left promiscuous mode [ 1514.469574][T31807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.577844][T31807] tipc: Resetting bearer [ 1514.800718][ T5841] Bluetooth: hci0: command tx timeout [ 1514.874881][T31807] erspan0 (unregistering): left promiscuous mode [ 1515.077249][T31807] tipc: Disabling bearer [ 1515.199621][ T10] net_ratelimit: 3 callbacks suppressed [ 1515.199641][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.217618][T31807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.231222][T31807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.244226][T31807] bond0 (unregistering): Released all slaves [ 1515.263393][T31807] bond1 (unregistering): Released all slaves [ 1515.284313][T31807] bond2 (unregistering): Released all slaves [ 1515.307391][T31807] bond3 (unregistering): Released all slaves [ 1515.344326][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12380'. [ 1515.445934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.502817][T31807] tipc: Disabling bearer [ 1515.512502][T31807] tipc: Left network mode [ 1516.149619][T14175] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1516.155682][T14175] syzkaller1: linktype set to 825 [ 1516.222916][T14189] netlink: 'syz.5.12388': attribute type 4 has an invalid length. [ 1516.239054][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.247975][T16418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.355154][T14175] Cannot find add_set index 0 as target [ 1516.401493][T14104] chnl_net:caif_netlink_parms(): no params data found [ 1516.479333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.701973][T14196] syzkaller0: entered promiscuous mode [ 1516.708138][T14196] syzkaller0: entered allmulticast mode [ 1516.879287][ T5841] Bluetooth: hci0: command tx timeout [ 1517.005106][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12398'. [ 1517.067794][T14104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.092822][T14104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.114824][T14104] bridge_slave_0: entered allmulticast mode [ 1517.134834][T14104] bridge_slave_0: entered promiscuous mode [ 1517.143197][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12399'. [ 1517.164167][T14215] vlan2: entered promiscuous mode [ 1517.177169][T14215] gretap0: entered promiscuous mode [ 1517.213280][T14104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.222568][T14104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.230525][T14104] bridge_slave_1: entered allmulticast mode [ 1517.247884][T14104] bridge_slave_1: entered promiscuous mode [ 1517.280763][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.416769][T14222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12400'. [ 1517.495206][T14104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.525668][T14104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.529042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.801424][T14225] wlan1 speed is unknown, defaulting to 1000 [ 1517.879806][T14104] team0: Port device team_slave_0 added [ 1517.891226][T14235] nr3: entered allmulticast mode [ 1517.972145][T14225] lo speed is unknown, defaulting to 1000 [ 1517.987500][T14104] team0: Port device team_slave_1 added [ 1518.133173][T14104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.144680][T14104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.174898][T14104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.222560][T14104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.251099][T14104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.323188][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.362543][T14104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.558769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.632800][T14104] hsr_slave_0: entered promiscuous mode [ 1518.655521][T14104] hsr_slave_1: entered promiscuous mode [ 1518.669755][T14104] debugfs: 'hsr0' already exists in 'hsr' [ 1518.682972][T14104] Cannot create hsr debugfs directory [ 1518.712020][T14261] netlink: 'syz.5.12411': attribute type 1 has an invalid length. [ 1518.961017][ T5841] Bluetooth: hci0: command tx timeout [ 1519.260160][T14268] netlink: 'syz.5.12413': attribute type 4 has an invalid length. [ 1519.288755][T16418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.460661][T14272] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12415'. [ 1519.584188][T31807] hsr_slave_0: left promiscuous mode [ 1519.601717][T31807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1520.399760][ T5889] net_ratelimit: 2 callbacks suppressed [ 1520.399779][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.422355][T14274] veth0: entered promiscuous mode [ 1520.428172][T14274] vlan4: entered promiscuous mode [ 1520.638916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.944503][T14288] syzkaller0: entered promiscuous mode [ 1520.992086][T14288] syzkaller0: entered allmulticast mode [ 1521.007937][T14296] netlink: 'syz.0.12422': attribute type 2 has an invalid length. [ 1521.031507][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12422'. [ 1521.042933][ T5841] Bluetooth: hci0: command tx timeout [ 1521.443032][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.566375][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12429'. [ 1521.602079][T31807] IPVS: stop unused estimator thread 0... [ 1521.678783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.008369][T14104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1522.052473][T14104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1522.084409][T14104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1522.115216][T14104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1522.116091][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12436'. [ 1522.331814][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.472474][T14104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.480610][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.539560][T14104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.578014][T31801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.585643][T31801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.636660][T31801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.644417][T31801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.707014][T14355] wlan1 speed is unknown, defaulting to 1000 [ 1522.719820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.760259][T14355] lo speed is unknown, defaulting to 1000 [ 1523.113427][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12445'. [ 1523.377210][T14104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.519647][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.638249][T14382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12451'. [ 1523.759217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.956705][T14383] wlan1 speed is unknown, defaulting to 1000 [ 1523.985587][T14383] lo speed is unknown, defaulting to 1000 [ 1524.464622][T14408] netlink: 'syz.0.12456': attribute type 13 has an invalid length. [ 1524.540532][T14406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12456'. [ 1524.605725][T14104] veth0_vlan: entered promiscuous mode [ 1524.619936][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.274316][T14104] veth1_vlan: entered promiscuous mode [ 1525.533372][T14104] veth0_macvtap: entered promiscuous mode [ 1525.551206][T14417] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1525.557475][T14417] syzkaller1: linktype set to 825 [ 1525.564086][T14413] netlink: 'syz.0.12458': attribute type 4 has an invalid length. [ 1525.585764][T14413] Cannot find add_set index 0 as target [ 1525.597922][T14104] veth1_macvtap: entered promiscuous mode [ 1525.682171][ T9943] net_ratelimit: 2 callbacks suppressed [ 1525.682193][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.741068][T14104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.807285][T14104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.838751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.867329][T31804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.902769][T31804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.941412][T31804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.965145][T31804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.007054][T14424] erspan0: entered promiscuous mode [ 1526.025668][T14424] batadv0: entered promiscuous mode [ 1526.033624][T14424] debugfs: 'hsr1' already exists in 'hsr' [ 1526.041173][T14424] Cannot create hsr debugfs directory [ 1526.248660][T31796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.257579][T31796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.384632][T31807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.419180][T31807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.438504][T14437] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12467'. [ 1526.476340][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12468'. [ 1526.722004][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.752107][T14450] sctp: [Deprecated]: syz.3.12470 (pid 14450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1526.752107][T14450] Use struct sctp_sack_info instead [ 1526.756181][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12472'. [ 1526.841125][T14456] SET target dimension over the limit! [ 1526.868431][T16418] IPVS: starting estimator thread 0... [ 1526.879021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.988734][T14460] IPVS: using max 36 ests per chain, 86400 per kthread [ 1527.226416][T14464] xt_connbytes: Forcing CT accounting to be enabled [ 1527.582980][T14477] netlink: 'syz.4.12478': attribute type 13 has an invalid length. [ 1527.635111][T14480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12478'. [ 1527.760034][ T9943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.918778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.358263][T14512] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12489'. [ 1528.401895][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.527247][T27588] IPVS: starting estimator thread 0... [ 1528.641061][T14519] IPVS: using max 38 ests per chain, 91200 per kthread [ 1528.800787][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.822576][T14531] netlink: 'syz.4.12497': attribute type 5 has an invalid length. [ 1528.860686][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12497'. [ 1528.871190][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.879114][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.883431][T14533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12498'. [ 1528.958761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.012897][T14533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12498'. [ 1529.078009][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.102216][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.295333][T14530] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1529.344090][T31801] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.363263][T31801] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.402661][T31801] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.460463][T31801] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.650467][T14543] 8021q: VLANs not supported on lo [ 1529.843541][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.905723][T14556] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12506'. [ 1530.246492][T14570] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.12513'. [ 1530.286593][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12513'. [ 1530.324602][T14573] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.12513'. [ 1530.460769][T14578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12512'. [ 1530.636050][T14580] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12514'. [ 1530.730514][T14585] IPv6: NLM_F_CREATE should be specified when creating new route [ 1530.879828][T27588] net_ratelimit: 1 callbacks suppressed [ 1530.879848][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.040688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.237052][T30093] nci: nci_rx_work: unknown MT 0x7 [ 1531.238005][T14595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1531.449973][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.504045][T14603] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12520'. [ 1531.886327][T14619] syzkaller0: entered promiscuous mode [ 1531.902338][T14624] IPv6: NLM_F_CREATE should be specified when creating new route [ 1531.909368][T14619] syzkaller0: entered allmulticast mode [ 1531.920542][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.957025][T14621] tipc: Started in network mode [ 1531.977384][T14621] tipc: Node identity 6a2f08cb3edb, cluster identity 4711 [ 1531.999865][T14621] tipc: Enabled bearer , priority 0 [ 1532.017023][T14628] netlink: 'syz.4.12530': attribute type 2 has an invalid length. [ 1532.039073][T14628] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12530'. [ 1532.051092][T14617] tipc: Resetting bearer [ 1532.078702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.217715][T14637] netlink: 'syz.4.12532': attribute type 5 has an invalid length. [ 1532.237496][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12532'. [ 1532.262579][T14617] tipc: Disabling bearer [ 1532.445505][T14640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12533'. [ 1532.960172][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.101045][T14669] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1533.119035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.251369][T14671] IPv6: NLM_F_CREATE should be specified when creating new route [ 1533.908054][ T4741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1533.926988][ T4741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1533.938314][ T4741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1533.947595][ T4741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1533.959944][ T4741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1534.019551][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.041622][T14694] wlan1 speed is unknown, defaulting to 1000 [ 1534.085124][T14694] lo speed is unknown, defaulting to 1000 [ 1534.150219][T14702] bpq0: left promiscuous mode [ 1534.155272][T14702] bpq0: left allmulticast mode [ 1534.158792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.188147][T14702] [ 1534.190530][T14702] ====================================================== [ 1534.197541][T14702] WARNING: possible circular locking dependency detected [ 1534.204718][T14702] syzkaller #0 Not tainted [ 1534.209161][T14702] ------------------------------------------------------ [ 1534.216479][T14702] syz.0.12555/14702 is trying to acquire lock: [ 1534.222668][T14702] ffffffff8fd42a78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 1534.232588][T14702] [ 1534.232588][T14702] but task is already holding lock: [ 1534.239977][T14702] ffffffff8fd42a18 (nr_neigh_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1534.250665][T14702] [ 1534.250665][T14702] which lock already depends on the new lock. [ 1534.250665][T14702] [ 1534.261445][T14702] [ 1534.261445][T14702] the existing dependency chain (in reverse order) is: [ 1534.270821][T14702] [ 1534.270821][T14702] -> #2 (nr_neigh_list_lock){+.-.}-{3:3}: [ 1534.280361][T14702] _raw_spin_lock_bh+0x36/0x50 [ 1534.285663][T14702] nr_rt_ioctl+0x40c/0xf90 [ 1534.290612][T14702] sock_do_ioctl+0x101/0x320 [ 1534.295750][T14702] sock_ioctl+0x5c6/0x7f0 [ 1534.300604][T14702] __se_sys_ioctl+0xfc/0x170 [ 1534.305736][T14702] do_syscall_64+0x14d/0xf80 [ 1534.311053][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.317914][T14702] [ 1534.317914][T14702] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 1534.326015][T14702] _raw_spin_lock_bh+0x36/0x50 [ 1534.331327][T14702] nr_rt_ioctl+0x215/0xf90 [ 1534.336475][T14702] sock_do_ioctl+0x101/0x320 [ 1534.341656][T14702] sock_ioctl+0x5c6/0x7f0 [ 1534.346532][T14702] __se_sys_ioctl+0xfc/0x170 [ 1534.352278][T14702] do_syscall_64+0x14d/0xf80 [ 1534.357411][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.364522][T14702] [ 1534.364522][T14702] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 1534.372882][T14702] __lock_acquire+0x15a5/0x2cf0 [ 1534.378357][T14702] lock_acquire+0xf0/0x2e0 [ 1534.383476][T14702] _raw_spin_lock_bh+0x36/0x50 [ 1534.389224][T14702] nr_rt_device_down+0xbe/0x860 [ 1534.394710][T14702] nr_device_event+0x137/0x150 [ 1534.400391][T14702] notifier_call_chain+0x1be/0x400 [ 1534.407070][T14702] __dev_notify_flags+0x16d/0x310 [ 1534.412818][T14702] netif_change_flags+0xe8/0x1a0 [ 1534.418641][T14702] dev_change_flags+0x130/0x260 [ 1534.424035][T14702] dev_ioctl+0x7b4/0x1150 [ 1534.429111][T14702] sock_do_ioctl+0x23e/0x320 [ 1534.434918][T14702] sock_ioctl+0x5c6/0x7f0 [ 1534.440121][T14702] __se_sys_ioctl+0xfc/0x170 [ 1534.445498][T14702] do_syscall_64+0x14d/0xf80 [ 1534.450622][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.457040][T14702] [ 1534.457040][T14702] other info that might help us debug this: [ 1534.457040][T14702] [ 1534.467537][T14702] Chain exists of: [ 1534.467537][T14702] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 1534.467537][T14702] [ 1534.481498][T14702] Possible unsafe locking scenario: [ 1534.481498][T14702] [ 1534.489032][T14702] CPU0 CPU1 [ 1534.494402][T14702] ---- ---- [ 1534.499764][T14702] lock(nr_neigh_list_lock); [ 1534.504440][T14702] lock(&nr_node->node_lock); [ 1534.511721][T14702] lock(nr_neigh_list_lock); [ 1534.518917][T14702] lock(nr_node_list_lock); [ 1534.523527][T14702] [ 1534.523527][T14702] *** DEADLOCK *** [ 1534.523527][T14702] [ 1534.531944][T14702] 2 locks held by syz.0.12555/14702: [ 1534.537239][T14702] #0: ffffffff8fbc6648 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1534.546327][T14702] #1: ffffffff8fd42a18 (nr_neigh_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1534.556433][T14702] [ 1534.556433][T14702] stack backtrace: [ 1534.562337][T14702] CPU: 1 UID: 0 PID: 14702 Comm: syz.0.12555 Not tainted syzkaller #0 PREEMPT(full) [ 1534.562362][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1534.562374][T14702] Call Trace: [ 1534.562381][T14702] [ 1534.562390][T14702] dump_stack_lvl+0xe8/0x150 [ 1534.562418][T14702] print_circular_bug+0x2e1/0x300 [ 1534.562444][T14702] check_noncircular+0x12e/0x150 [ 1534.562470][T14702] __lock_acquire+0x15a5/0x2cf0 [ 1534.562493][T14702] ? __lock_acquire+0x6b5/0x2cf0 [ 1534.562516][T14702] lock_acquire+0xf0/0x2e0 [ 1534.562535][T14702] ? nr_rt_device_down+0xbe/0x860 [ 1534.562568][T14702] ? nr_rt_device_down+0xbe/0x860 [ 1534.562590][T14702] _raw_spin_lock_bh+0x36/0x50 [ 1534.562613][T14702] ? nr_rt_device_down+0xbe/0x860 [ 1534.562635][T14702] nr_rt_device_down+0xbe/0x860 [ 1534.562657][T14702] ? nr_device_event+0x12f/0x150 [ 1534.562681][T14702] nr_device_event+0x137/0x150 [ 1534.562702][T14702] notifier_call_chain+0x1be/0x400 [ 1534.562730][T14702] __dev_notify_flags+0x16d/0x310 [ 1534.562755][T14702] ? __pfx___dev_notify_flags+0x10/0x10 [ 1534.562777][T14702] ? __dev_change_flags+0x51e/0x690 [ 1534.562801][T14702] ? __pfx___dev_change_flags+0x10/0x10 [ 1534.562823][T14702] ? full_name_hash+0x92/0xe0 [ 1534.562847][T14702] netif_change_flags+0xe8/0x1a0 [ 1534.562871][T14702] dev_change_flags+0x130/0x260 [ 1534.562894][T14702] dev_ioctl+0x7b4/0x1150 [ 1534.562940][T14702] sock_do_ioctl+0x23e/0x320 [ 1534.562958][T14702] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1534.562974][T14702] ? do_futex+0x395/0x420 [ 1534.562999][T14702] sock_ioctl+0x5c6/0x7f0 [ 1534.563016][T14702] ? __pfx_sock_ioctl+0x10/0x10 [ 1534.563031][T14702] ? __fget_files+0x2a/0x420 [ 1534.563053][T14702] ? __fget_files+0x3a0/0x420 [ 1534.563074][T14702] ? __fget_files+0x2a/0x420 [ 1534.563097][T14702] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1534.563116][T14702] ? __pfx_sock_ioctl+0x10/0x10 [ 1534.563132][T14702] __se_sys_ioctl+0xfc/0x170 [ 1534.563150][T14702] do_syscall_64+0x14d/0xf80 [ 1534.563165][T14702] ? trace_irq_disable+0x3b/0x150 [ 1534.563189][T14702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.563205][T14702] ? clear_bhb_loop+0x40/0x90 [ 1534.563223][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.563239][T14702] RIP: 0033:0x7f4359f9c799 [ 1534.563256][T14702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.563271][T14702] RSP: 002b:00007f43581f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.563290][T14702] RAX: ffffffffffffffda RBX: 00007f435a215fa0 RCX: 00007f4359f9c799 [ 1534.563302][T14702] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 1534.563313][T14702] RBP: 00007f435a032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1534.563324][T14702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1534.563334][T14702] R13: 00007f435a216038 R14: 00007f435a215fa0 R15: 00007ffc47049008 [ 1534.563351][T14702] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1535.198849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.785944][T31804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.881625][T31804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.975620][T31804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.008922][ T5841] Bluetooth: hci5: command tx timeout [ 1536.145163][T31804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.238815][ C0] net_ratelimit: 5 callbacks suppressed [ 1536.238837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.300654][T31804] bridge_slave_1: left allmulticast mode [ 1536.306702][T31804] bridge_slave_1: left promiscuous mode [ 1536.314647][T31804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.323786][T27588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.356139][T31804] bridge_slave_0: left allmulticast mode [ 1536.369331][T31804] bridge_slave_0: left promiscuous mode [ 1536.376621][T31804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.579731][T31804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.591878][T31804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.631218][T31804] bond0 (unregistering): Released all slaves [ 1536.926050][T31804] hsr_slave_0: left promiscuous mode [ 1536.933219][T31804] hsr_slave_1: left promiscuous mode [ 1536.947309][T31804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.955124][T31804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.963602][T31804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.972316][T31804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.985831][T31804] veth1_macvtap: left promiscuous mode [ 1536.992695][T31804] veth0_macvtap: left promiscuous mode [ 1536.998267][T31804] veth1_vlan: left promiscuous mode [ 1537.004231][T31804] veth0_vlan: left promiscuous mode [ 1537.210176][T31804] team0 (unregistering): Port device team_slave_1 removed [ 1537.224037][T31804] team0 (unregistering): Port device team_slave_0 removed [ 1537.278782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.361550][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.014983][T31804] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.046130][T31804] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.100347][T31804] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.135432][T31804] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.214849][T31804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.248079][T31804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.318710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.333913][T11236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.346586][T31804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.399933][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.459670][T31804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.556542][T31804] bridge_slave_1: left allmulticast mode [ 1538.563097][T31804] bridge_slave_1: left promiscuous mode [ 1538.569996][T31804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.580337][T31804] bridge_slave_0: left allmulticast mode [ 1538.586325][T31804] bridge_slave_0: left promiscuous mode [ 1538.592545][T31804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.603037][T31804] bridge_slave_1: left allmulticast mode [ 1538.610233][T31804] bridge_slave_1: left promiscuous mode [ 1538.618160][T31804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.627923][T31804] bridge_slave_0: left allmulticast mode [ 1538.635908][T31804] bridge_slave_0: left promiscuous mode [ 1538.647271][T31804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.659397][T31804] bridge_slave_1: left allmulticast mode [ 1538.666803][T31804] bridge_slave_1: left promiscuous mode [ 1538.674507][T31804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.683812][T31804] bridge_slave_0: left allmulticast mode [ 1538.690647][T31804] bridge_slave_0: left promiscuous mode [ 1538.697153][T31804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.956023][T31804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.967465][T31804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.978110][T31804] bond0 (unregistering): Released all slaves [ 1538.988345][T31804] bond1 (unregistering): Released all slaves [ 1539.001094][T31804] bond2 (unregistering): Released all slaves [ 1539.035008][T31804] erspan0 (unregistering): left promiscuous mode [ 1539.113372][T31804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.124772][T31804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.136380][T31804] bond0 (unregistering): Released all slaves [ 1539.184601][T31804] erspan0 (unregistering): left promiscuous mode [ 1539.282089][T31804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.301783][T31804] bond0 (unregistering): Released all slaves [ 1539.359252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.394821][T31804] : left promiscuous mode [ 1539.443285][T31804] tipc: Left network mode [ 1539.444136][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.470417][T31804] tipc: Disabling bearer [ 1539.476647][T31804] tipc: Left network mode [ 1540.111222][T31804] hsr_slave_0: left promiscuous mode [ 1540.117138][T31804] hsr_slave_1: left promiscuous mode [ 1540.123446][T31804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.132473][T31804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.142580][T31804] batadv0: left promiscuous mode [ 1540.156436][T31804] hsr_slave_0: left promiscuous mode [ 1540.165660][T31804] hsr_slave_1: left promiscuous mode [ 1540.172178][T31804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.180669][T31804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.188510][T31804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.196870][T31804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.214573][T31804] hsr_slave_0: left promiscuous mode [ 1540.222018][T31804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.230395][T31804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.238225][T31804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.247633][T31804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.263801][T31804] veth1_macvtap: left promiscuous mode [ 1540.270297][T31804] veth0_macvtap: left promiscuous mode [ 1540.275845][T31804] veth1_vlan: left promiscuous mode [ 1540.281875][T31804] veth0_vlan: left promiscuous mode [ 1540.287942][T31804] veth1_macvtap: left promiscuous mode [ 1540.294634][T31804] veth0_macvtap: left promiscuous mode [ 1540.302036][T31804] veth1_vlan: left promiscuous mode [ 1540.398686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.765342][T31804] team0 (unregistering): Port device team_slave_1 removed [ 1540.792772][T31804] team0 (unregistering): Port device team_slave_0 removed [ 1541.378850][T11236] net_ratelimit: 1 callbacks suppressed [ 1541.378872][T11236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.438715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.520307][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.791740][T31804] IPVS: stop unused estimator thread 0... [ 1542.478895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.559497][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.518746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.608997][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog