last executing test programs: 6.541745682s ago: executing program 3 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000000)='-&@\x00', 0xa00, 0x0, 0x7c, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=@deltfilter={0x13f4, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xfff2, 0xb}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0x1390, 0x2, [@TCA_U32_POLICE={0x34, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfd}]}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x5}}, @TCA_U32_SEL={0x6a4, 0x5, {0x9, 0x7, 0xf, 0xef2f, 0xb3, 0x8000, 0x4e3, 0x80000001, [{0x2, 0x4ae0, 0x1, 0xb2}, {0x2817, 0x200, 0xad, 0x5}, {0xa, 0x302f, 0x4, 0x3}, {0x7fff, 0x7fffffff, 0xf4, 0x1}, {0x0, 0x2, 0x6, 0x13a9}, {0x2, 0xf42a, 0x2, 0x7}, {0x0, 0x7fffffff, 0x5, 0xfffffff8}, {0x9, 0x6, 0x200, 0x7}, {0x6, 0x9, 0x2, 0xaf}, {0xa, 0x28000000, 0xb, 0x400}, {0x9, 0x9, 0x0, 0x3}, {0x2, 0x40, 0xffff7fff, 0x1}, {0x4, 0x4168f921, 0x3, 0x9961}, {0xfffffff7, 0x5, 0x9, 0x2}, {0xdc, 0x4, 0x1, 0x40}, {0x4, 0x5, 0x5, 0x1de}, {0x8, 0x20157423, 0x5, 0x3}, {0x1, 0x138, 0x0, 0x3}, {0xffffffff, 0x1, 0x401, 0xd}, {0x0, 0x3, 0x6, 0x1e1040a7}, {0x200, 0xb03, 0x8, 0x88}, {0x1, 0x4, 0x81}, {0x4, 0x3, 0x1, 0x9}, {0x0, 0x0, 0x88f1}, {0x212e, 0x0, 0xa7, 0x152684df}, {0xfffffff5, 0x1, 0x3}, {0x7fff, 0xc, 0xec, 0x4}, {0x2, 0x81, 0x8001, 0x5}, {0x65d144e8, 0x7, 0x666c, 0x7d7}, {0x3, 0xffffe8ef, 0x8, 0x7fff}, {0x1, 0x4, 0x9, 0x2}, {0x2, 0x6, 0x6, 0x9}, {0x0, 0xff, 0x73, 0x7}, {0x4, 0x8e7, 0x0, 0x7}, {0x9, 0xb, 0xfb6, 0x9}, {0x4, 0x200, 0x7, 0x1}, {0x9, 0x8843, 0x6, 0x9}, {0x9, 0xf, 0xf078, 0x3}, {0x7, 0x5, 0x2, 0x1ff}, {0x9, 0x2, 0x6, 0x216}, {0x7, 0xfffff000, 0xf396, 0x1}, {0xc, 0x9, 0x200, 0x7}, {0x6, 0xfffffff8, 0xfffffffa}, {0x8, 0x5, 0x8, 0x8}, {0x1000, 0x2, 0x0, 0x6c9}, {0xd, 0x3, 0x6, 0x2d800000}, {0x3, 0x7, 0x7fff, 0x7f}, {0x8, 0x6a, 0x78d4, 0x8}, {0x4, 0xc, 0x28f2, 0x2}, {0xb6, 0x1, 0x493e, 0x7a}, {0xfffffff7, 0x800, 0xa8, 0x1}, {0x8, 0x4, 0x6c2, 0x7f}, {0x7ff, 0x4, 0xffff, 0x8}, {0x8, 0x5, 0x200, 0x5}, {0x3, 0x1, 0x4, 0x8}, {0x264, 0xd, 0x1, 0x7ff}, {0x1, 0x5, 0x6}, {0x200, 0x1, 0xffff, 0xe46}, {0x1, 0x6, 0x4, 0x25}, {0x10000, 0xfa9d, 0x2, 0x3}, {0x9, 0x48, 0x6, 0x6}, {0xfa, 0x8, 0xffffff9a, 0x10000}, {0xfffffffb, 0x1, 0x4, 0x10000}, {0xff, 0x2, 0x8, 0x9}, {0xfffffffc, 0xc, 0x10000, 0x3}, {0x5, 0x6, 0x80000001, 0x3}, {0xa, 0x0, 0x7, 0x1}, {0x8, 0x7, 0xffffffac, 0x3}, {0x7, 0xe4, 0x4, 0xffff}, {0x6, 0x3, 0x3, 0x7}, {0x8, 0xba, 0x0, 0x1}, {0x4, 0xca3, 0x5, 0x1}, {0x9, 0x1, 0x3, 0x5}, {0x8, 0x3, 0x4, 0x8}, {0x0, 0x3, 0x3, 0x7}, {0x20, 0x1, 0x183, 0xfff}, {0x0, 0xfffffff9, 0x2}, {0x4, 0x7, 0x8, 0x7}, {0x2a, 0xffff12a9, 0x1ff, 0x7}, {0x6, 0x62, 0x7f, 0x7fffffff}, {0x772, 0x842e, 0x3, 0xc4}, {0x401, 0x7, 0x664eafc6}, {0x8, 0x872, 0x0, 0xa}, {0x5, 0x8, 0x10000, 0x80000000}, {0x0, 0x0, 0x4, 0xb74}, {0xfffffff0, 0x80000000, 0xfff}, {0x101, 0x9, 0x5c, 0xffffffff}, {0x6000, 0x1, 0x2, 0x8}, {0xd, 0x401, 0x5, 0x3}, {0x5, 0xf, 0x3, 0x9}, {0x4, 0x6, 0x5, 0xffffff0d}, {0x7, 0x7ff, 0x0, 0x9}, {0x0, 0x8000, 0xf, 0xe}, {0x3, 0x5, 0x76f3, 0xc4}, {0x7, 0xb0, 0x5, 0x8}, {0x10000, 0x5, 0x7b, 0x163c}, {0xdbd, 0x441df0c8, 0x6, 0x2}, {0x7f, 0x3ff, 0x780000, 0x6}, {0xf, 0xe, 0xfff, 0x7}, {0x0, 0x2, 0x6, 0x3}, {0x1, 0xfffffffd, 0x1, 0x1}, {0xb, 0x4, 0x2, 0x5}, {0x6, 0x1ff, 0xfff, 0x6d}, {0x8, 0xfffffffb, 0x79, 0xf}, {0xc8, 0xd, 0xfffffff8, 0x9}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0x8}}, @TCA_U32_POLICE={0x24, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc}]}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_POLICE={0xc60, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x6, 0x6, 0x9, 0xffffffff, 0x7, 0x4, 0x3, 0x81, 0xfff, 0x6, 0x4, 0x6, 0x5, 0x2, 0xfff, 0x668, 0x3e80000, 0x7, 0x8c16, 0x9, 0x0, 0x1, 0x2, 0xfc, 0x0, 0x4d, 0x7, 0xe, 0x81, 0xae, 0x7f, 0x1, 0x400, 0x101, 0x3, 0xb, 0x74b, 0x4e82, 0x3ff, 0x6, 0x20527c92, 0xc0, 0xb2d, 0x401, 0x401, 0xffffff3c, 0x10, 0xed1e, 0x80000000, 0x0, 0x2, 0x1ff, 0x81, 0x7, 0x0, 0x10, 0x80000000, 0x3ff, 0x8, 0x4, 0x6, 0x8, 0x4, 0xfff, 0x1ff, 0x4, 0xfffffff8, 0x4, 0x200, 0x10001, 0x4, 0x4, 0x43a2, 0x2, 0x3, 0xa4800000, 0x6e10, 0xd3fe, 0x9, 0x8, 0x0, 0x81, 0x33, 0x67, 0x7, 0x401, 0x28, 0x3ff, 0x9, 0x2, 0x7f, 0x8, 0x4, 0x7f, 0x2, 0xfffff001, 0x4, 0x800, 0x9, 0xc4, 0x38000000, 0x400, 0xf165, 0x3, 0xe, 0x6, 0xb7, 0x7, 0x8, 0x10, 0x0, 0x2, 0x7ff, 0x100000, 0x8, 0x2, 0xc7, 0x0, 0x9f, 0x99a, 0x3, 0xe1, 0x3, 0x2, 0x200, 0x5, 0x3, 0x4, 0x3, 0x3, 0x5, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x0, 0x7f, 0x9, 0x7, 0x6, 0x4, 0x4, 0x9, 0x5, 0x7fff, 0x2, 0x9f2c, 0x400, 0x17c, 0x7, 0xfff, 0x4, 0x800, 0x800, 0x9, 0x400, 0x80000001, 0x4, 0xfffffff9, 0x5, 0x6d, 0x3, 0xfa57, 0x76, 0xfff, 0x4, 0xba, 0x80000000, 0x4, 0x2, 0x0, 0x0, 0xc, 0x9, 0xfffffffb, 0x400, 0x8000, 0x7877, 0x1, 0x6, 0x4, 0x7ff, 0x8f8, 0x8, 0x6, 0x3, 0xfffffff4, 0x9, 0x3, 0xf4e, 0xffff8cc9, 0x3, 0x8, 0x5, 0x7, 0x2, 0x5, 0x17, 0x2, 0x1, 0x2, 0x64, 0xf, 0xd, 0x0, 0xd13, 0xfffffffc, 0x7fff, 0x7, 0x9, 0xa374, 0x9, 0xfffffff7, 0x8, 0x400, 0x9, 0x1a4a7b51, 0x6, 0x3, 0x6, 0x0, 0xcf26, 0x80, 0x7, 0x8, 0x616, 0x3, 0x0, 0x80, 0x5, 0x63de, 0xfc91, 0x3, 0xf, 0x9, 0x0, 0x15e, 0x1, 0xf, 0x34, 0x8, 0x2000, 0x5, 0x4, 0x5, 0x166b, 0x7fff, 0x2, 0x10001, 0x7a2, 0x6, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x5, 0xbdb, 0x4, {0x3b, 0x1, 0x9, 0x0, 0x4, 0x5}, {0x1, 0x1, 0xfffc, 0x4, 0x32e, 0x3ff}, 0x1, 0xe519, 0x1a9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xabe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x9, 0x93a6, 0x196, 0xa, 0x2, 0x100, 0x4ef, 0x76b, 0x1, 0x4, 0x3, 0x1a, 0x1, 0x5cc, 0x101, 0x8001, 0x9, 0x5, 0x5, 0xffff, 0x3, 0x7, 0x7ff, 0x2, 0x9, 0x5, 0x9, 0x9771, 0x5, 0x7fff, 0x10000000, 0x4, 0x5, 0xffff, 0x80, 0xfffffffd, 0x832, 0xf, 0x7fff, 0x80000001, 0x2, 0x9, 0xa74, 0x3, 0x4, 0x5, 0xb4, 0x0, 0x1ff, 0x1, 0xfffff000, 0xb, 0x7, 0x80000000, 0x7, 0xfffffffa, 0x7, 0x3, 0x2, 0x1000, 0x80, 0x0, 0x1, 0x36, 0x0, 0x4, 0x8, 0x9, 0x7, 0x6, 0x0, 0x1ff, 0x7, 0x8, 0xfffffff2, 0x7, 0x4, 0xd, 0x0, 0x4, 0x9, 0xb, 0x1ff, 0x1000, 0x10, 0x8, 0x81, 0x6, 0xfce, 0x9, 0x0, 0x10001, 0x79, 0xb1, 0x3, 0x0, 0x0, 0x9, 0x8, 0x17, 0x51b4, 0x620d, 0xaa, 0x1, 0x3e, 0xfffffffd, 0x2, 0x5, 0x81, 0x40000000, 0x2f0, 0x10000, 0xfffffffc, 0x1fe0, 0x8000, 0x5, 0x2, 0xd2, 0x100, 0xfffffffe, 0xfff, 0x2, 0xe9c, 0x0, 0x5, 0x2, 0x80000, 0x2, 0x6, 0x40, 0x9, 0x1, 0x137a, 0x1ff, 0x5, 0x0, 0x8001, 0x0, 0x1000, 0x5e, 0xfffffff8, 0x9, 0x5, 0xd2, 0x6, 0x4, 0x8, 0x400, 0x8, 0x3, 0x4, 0x8, 0x3, 0x9, 0x9, 0x9, 0x4, 0x800, 0x6, 0x10001, 0xa, 0x304, 0x5, 0x8, 0xb8b, 0x6, 0x7, 0xfffffffc, 0x5, 0x3, 0x10001, 0xd, 0x8, 0x7fff, 0xbe1, 0x783d0064, 0x0, 0x1, 0x101, 0xd, 0x4, 0xff, 0xa, 0x6, 0x4, 0x0, 0x7, 0xffff, 0x6a, 0x3, 0xe2, 0x7fffffff, 0xd93, 0x8001, 0x8, 0x9, 0x9, 0x2, 0x401, 0x1, 0x5, 0x2, 0x8, 0xffffffff, 0x2, 0x3d, 0x1, 0x10, 0x6, 0xffffffff, 0x1c, 0x1, 0x4, 0x3, 0x9, 0x5, 0x2, 0x6, 0x2, 0x2, 0xd8, 0x6, 0x7, 0x9, 0xfffffff9, 0x7bccfe0b, 0xf4, 0x9, 0x9, 0x8, 0x7, 0x1, 0x80000000, 0x1, 0x617, 0x1, 0x9, 0x1, 0x2, 0x3, 0x9, 0x0, 0x800, 0x2, 0x7c0, 0x180000, 0x5, 0x3, 0xb8, 0x7, 0x64, 0x0, 0xfffffec6, 0x442, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5521, 0x5, 0x1, 0x8, 0x7, 0x4, 0x919, 0x2, 0x6, 0x1, 0x10, 0x8, 0x0, 0x7b, 0x100, 0x800, 0x800, 0x5, 0x8, 0x0, 0x8, 0x4, 0x1, 0x9, 0x0, 0x3, 0x2e23, 0x1d9e0fbb, 0xfffffff8, 0xff, 0x8, 0x2, 0x1, 0x3, 0xff, 0x585a, 0x7, 0x10001, 0x7, 0x2, 0x1, 0xea68, 0x40009, 0x9, 0x4, 0x499, 0x8, 0x7fffffff, 0x2, 0x0, 0x7176, 0x8, 0x0, 0x6, 0xdb3c, 0x5, 0x9, 0x4, 0x10, 0x7, 0x2, 0xfffffffa, 0x1, 0x5, 0x5, 0xff, 0x1, 0x6, 0x7, 0x17, 0x1, 0xfff, 0x1, 0xf, 0x9, 0x8ed, 0x2, 0x554, 0x10, 0x7fffffff, 0x4, 0xc, 0x80000001, 0x0, 0x2, 0x6, 0xffffffff, 0xe00000, 0x10, 0x7, 0x200, 0x6e, 0xc, 0x101, 0x6, 0x1, 0x5a5, 0x4000, 0x6, 0x9, 0x10, 0xa, 0x5, 0x0, 0x80000000, 0x0, 0xf3b, 0x7, 0x5, 0xff, 0x0, 0x1, 0x9, 0x1, 0x8, 0x1b0, 0xd, 0x0, 0x2, 0x8000, 0x1, 0x8, 0x8, 0xc, 0xba, 0x9, 0xeaf3, 0x80000001, 0x6, 0x81, 0x2, 0x8, 0x1, 0x0, 0x5, 0x7, 0x7fffffff, 0x9, 0x0, 0x1, 0x7, 0x8, 0x4, 0x1, 0x7fffffff, 0x0, 0x0, 0xb28f, 0x5, 0x2, 0x600000, 0x7, 0x101, 0x2, 0x0, 0x0, 0x9, 0x8, 0x1, 0x1, 0xffffff31, 0x3, 0xfffffff7, 0x9, 0x1, 0x6, 0xcd, 0x7, 0xf, 0x6, 0x1e3f, 0x0, 0x3ff, 0x2, 0xffffff08, 0x2, 0xa, 0x8, 0x8d, 0x5, 0x0, 0x3ff, 0x5, 0x9, 0x5, 0x0, 0x100, 0x5, 0xfffffffc, 0xffffffff, 0x10000, 0x5, 0xb, 0x4, 0x5, 0x4, 0x8, 0x9, 0x8001, 0x3, 0x62, 0x3, 0x10000, 0x2, 0x5, 0x100, 0x7ff, 0xf, 0x2, 0xffffffff, 0xfffffa37, 0xd1, 0x800, 0x1, 0x6, 0x10, 0x4, 0x1ff, 0xfffffff6, 0x4, 0x7, 0xd, 0xb, 0x3, 0x8, 0x9, 0x9, 0xfffff0b3, 0x1, 0x3, 0xfdc5, 0x9, 0xfffffffb, 0x0, 0x6, 0x2, 0x100, 0x6, 0x16083707, 0xdd4c, 0x1, 0x0, 0x4, 0xe, 0xb, 0x0, 0x5, 0x4, 0x8, 0x8, 0x20000000, 0xd3, 0x1, 0x724b02d6, 0x7fffffff, 0x6]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x7f, 0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8}]}, 0x13f4}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25190000006000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000100000008000104", @ANYRES32=0x0, @ANYBLOB="0c0001800800030002000000140001800800030002000000080003000300000060000180140002006d61637674617030000000000000000014000200697036746e6c30000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f76746930000000000000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB], 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x40) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00012700"/14], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept(r9, 0x0, 0x0) 6.194662659s ago: executing program 3 (id=3315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x2, 0xffffffffffffffff, 0xd, 0x8}, 0x6c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r6) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r8, 0x11}, 0x80, &(0x7f0000003480)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c1020000ff11125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) (async) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r8, 0x11}, 0x80, &(0x7f0000003480)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c1020000ff11125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) socket(0x28, 0x5, 0x0) (async) r10 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r10, &(0x7f0000000080), 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) 5.337101271s ago: executing program 3 (id=3322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000200a0229c47e4f630920dd6714d5fc551270000dd0a000000002d0099702ff307000000b6310000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x52895}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x20000000) 4.873053997s ago: executing program 3 (id=3325): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r4, 0xc3ceb000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 4.644405457s ago: executing program 3 (id=3328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.84771461s ago: executing program 3 (id=3330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe"], 0xfe33) 2.258414607s ago: executing program 2 (id=3354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x208, 0x0, 0xfeffffff, 0x208, 0xf8, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x24, @loopback, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x7, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="290e29d37000fbdbdf052700000014003003322e506a4edc40915724e1a6ef0813900a0001007770616e31000000050031"], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) pipe(0x0) sendfile(r0, r5, 0x0, 0xc1) 1.988597653s ago: executing program 4 (id=3355): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc4, &(0x7f0000000080)=""/196, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.747899984s ago: executing program 4 (id=3356): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.617099847s ago: executing program 2 (id=3358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) 1.616298949s ago: executing program 1 (id=3359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa140004000c000280050001000000000004dbcc34f7d0c51136d36e2220bd4a9cce1c08c89502b934806f1b6df35334b550e58a8741cb560d4ac660f731521912de2c673000"/192], 0x8c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRESHEX=r4, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff09, 0x110c2300fe) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={'ip6_vti0\x00', {0x2, 0x4e24, @multicast1}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="190429bd7000ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048040) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1f162d4704ffdf9e260a6ff7ec84a5f19d6a934a74752af41f0a8488fefecc733874a0a8aa1fa1af31108bdac4abd42f7a6b815e71e85f1e34ac4fad3f6b55f265f33fc03c0339477c3d059c761a85840a10584541d6bac6e03fadaf684f122b502a11db14bed6059db38269950e3418167d8d03d5d6b254b08bd8e11bc734a2f56ef6e764faf47b96fa6ef0cefe5e1a229c43c600"/166, @ANYRESOCT=r0, @ANYRESHEX=r9], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r5], 0x28}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES32=r13, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x0, r13}}, 0x18}}, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000080)=0x40002, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) 1.437809956s ago: executing program 4 (id=3360): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket(0x2a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x484, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x454, 0x2, [@TCA_CGROUP_POLICE={0x450, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5871, 0x1, 0xfffffe01, 0x4, 0xc, {0x7, 0xeef476b4059d4104, 0xf, 0x9000, 0x800, 0x2}, {0x58, 0x0, 0x4, 0x7fff, 0x40, 0x8000}, 0x0, 0xfd}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5ee, 0x2, 0xffffff81, 0xa99a, 0x6, 0x3, 0x0, 0x30000, 0x5, 0x8, 0x4, 0xfffffc01, 0x6, 0x5, 0x4, 0xffff, 0x8, 0x49f, 0x15e0b075, 0x4, 0xffffffff, 0x2, 0x3, 0x5, 0x7, 0x80, 0x2, 0x57, 0xb8, 0x2, 0x7fffffff, 0x6b2, 0x1, 0x101, 0x0, 0x1000, 0x9, 0x0, 0x2, 0x8, 0xb8, 0x5, 0xd2c4, 0x6, 0xd5, 0x37f1, 0x800, 0x4, 0x7, 0x7fff, 0x6, 0x3, 0x81, 0x8, 0x200, 0x8001, 0x3, 0x7, 0x7, 0x6, 0x7, 0x7, 0x382fb2f5, 0x5, 0x2, 0x5, 0x80, 0x2c, 0x1, 0x30, 0x7ff, 0x6, 0x5, 0x59ab, 0xf, 0x80000001, 0xffffc21d, 0x7, 0x0, 0x3, 0x6, 0x3, 0x9, 0x3, 0x301, 0x80000000, 0x3, 0x81, 0x4, 0x6e79, 0x5014de34, 0x9, 0x1fb6, 0x3, 0xfffff575, 0x2, 0xffff0001, 0x7, 0x9, 0x40000, 0x2, 0x8, 0x4, 0x4, 0x64, 0x2, 0x8000, 0x24, 0x0, 0x4, 0x2, 0x2, 0xcf4, 0x8000, 0x0, 0x7, 0x70000000, 0x10000, 0x2, 0xffff, 0x4, 0x1ff, 0x6, 0x6, 0x6, 0x6, 0x740f, 0x4, 0x81, 0x2, 0xfffffff9, 0x84d, 0x10001, 0x5, 0x3, 0xffffff00, 0x81, 0x26, 0x5, 0xffff, 0x5, 0x6, 0x2, 0x2, 0x2, 0x76, 0x81, 0x81, 0x7fffffff, 0x1b8000, 0x447, 0x10000, 0x1, 0x40, 0x4, 0x6, 0x101, 0xfffffff8, 0xfffffbff, 0x6, 0x6, 0x2, 0x8000, 0x6, 0x83, 0x6, 0xf, 0x9, 0x4, 0x7, 0x4, 0x5, 0x5, 0x7, 0xfffffffc, 0x399, 0x3, 0x0, 0x0, 0x4, 0xfb5, 0x9, 0x0, 0x80000001, 0x7fffffff, 0x4, 0x7, 0x40, 0x1, 0x8, 0x30000000, 0x1, 0xfffffffd, 0x9f5, 0x2, 0x401, 0x2, 0x1, 0x2, 0x0, 0x3, 0x3, 0x401, 0x10001, 0x1, 0x8, 0x2c6e, 0x6, 0x9, 0xd1, 0xffffff4f, 0x8, 0x3, 0xff, 0x2, 0xff, 0xfffffff9, 0x9, 0x80000000, 0x1, 0x0, 0x2, 0x7, 0x7, 0x9, 0x5, 0x4, 0xf599, 0x401, 0x7, 0xfffffff9, 0x2, 0xfffffffc, 0x100, 0x6, 0x4, 0x1, 0x6b, 0x1, 0x8, 0x3, 0xca6, 0xfff, 0x94, 0x9, 0x8, 0x4, 0x8, 0x101, 0x7, 0xe29d, 0xaf, 0x7fffffff, 0x51, 0x9, 0x3]}]}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8000, 0x5, 0x1, 0xebf}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_emit_ethernet(0xc2, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffffffff74eca04e0fb00800462400b400680000003a907800000000e0000001000703ec4e244e21009c9078010000000400000068a44e9390e1b96305ef26836b3c9c1f4b20d9ac60291b70ea627f6d1ab003fc74e698bda2c0e37d6aa18509fb05244cfe09bb7850b8e68d829d874bcaa5ca80473dcdcedf1ed699c18200004671ffab96eb7b93133209d1007ac68d9b619a8cf87b4fa609d02c370f25e196d2ff302bdb9f67a0f9db7e7bac1aee6f225cabb19adca44b3620cdf9f3b2af3361fc5e273144bb81f2aab1c5c5ad6d82d3a1a882f415a64c3f6b5069bd726a3f1c040c5d1c5215a1a992f373129d86a961"], 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.423632738s ago: executing program 0 (id=3361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}}, 0x0) 1.371684411s ago: executing program 2 (id=3362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x4000000}, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0xe4, 0x18}, 0xc) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x8, r0}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000080)="0ab390107f", &(0x7f0000000000)=""/10, 0x2}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ed5280d04bc7f7731a45512afceacf87f4189222687b5bad15a7e754cd"], 0x48) getsockname(r1, &(0x7f0000000a00)=@phonet, &(0x7f0000000a80)=0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r11, &(0x7f00000001c0)="4b2929a784e8036d055142b882b64f4748814938472493616a088db4638a3851ab6a908a3d235b7d3571", &(0x7f0000000000)=""/2, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x21, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0x2, 0x0, 0xa, 0xfffffffffffffff4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x495, 0x0, 0x0, 0x0, 0x7}, @ldst={0x3, 0x2, 0x1, 0x5, 0x4, 0x8, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x63, &(0x7f0000000440)=""/99, 0x41100, 0x0, '\x00', r4, @fallback=0x1d, r5, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x1, 0x1, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[0xffffffffffffffff, r6, r7, r8, r9, r10, r11, r12], &(0x7f0000000840)=[{0x2, 0x3, 0x2, 0x2}, {0x2, 0x1, 0x1, 0xc}, {0x2, 0x2, 0x3, 0x4}], 0x10, 0x1}, 0x94) 1.204223382s ago: executing program 0 (id=3363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000004c0)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', r2, 0x40, 0x7800, 0x3, 0x1, {{0x2b, 0x4, 0x2, 0x0, 0xac, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x67, 0xffffffffffffffff, [{0x5, 0xd, "be2f82afa780d716fbc207"}, {0x7, 0x10, "39fc04b8a50b3db97fe410caa2c8"}, {0x7, 0x8, "85c0e0f499c4"}, {0x5, 0x5, "f91c19"}, {0x5, 0xe, "1f94dab287f8d8299f2ffff1"}, {0x2, 0x6, '((|\a'}, {0x0, 0x11, "5950283e05e02ea263573e7561ceb5"}, {0x0, 0x8, "9ecd05c1c8a4"}, {0x5, 0xa, "7228cd74483b2f57"}]}, @timestamp={0x44, 0x20, 0xc, 0x0, 0x3, [0x401, 0x8, 0x1, 0x7, 0x8, 0x9, 0x0]}, @noop, @generic={0x44, 0xe, "641e2c087551292f896055d4"}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@delqdisc={0xb0, 0x25, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe, 0x8}, {0xffe0, 0x2}, {0x10, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x4, 0x9, 0x2, 0x10000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xffffffff, 0x659c, 0x800, 0xe}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x6, 0x0, 0x8000, 0xac25}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x9}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}]}}]}, 0xb0}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0) 1.201867326s ago: executing program 1 (id=3364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x240}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400000000fdffffff00000000af35f57ad070797db7208c9640d19b2877ee69daf7c59a82016d655ce84385aa7fa5d2aa7bbcb8d84a06194c981111ce87d23886715d9f353b65309a1b3b6acc644c888b03b964d7b4c49cf50cd477ae61e04a017a544953d62d1437488442346715f477392cb8f6476cee3f7ef8cbe3231b716a847b4558f644", @ANYRES32=r2, @ANYBLOB="0103000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000380)) getsockname$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x10) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x878, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x80000001, 0x5, 0xd03cbcd, 0x9, 0x5, 0x400, 0xffff, 0xf2, 0x6, 0xf0, 0xe9, 0x7, 0x4, 0x3, 0x4, 0x1, 0xedb, 0x9, 0x5, 0x7eb, 0x7, 0x0, 0x200, 0x6, 0x8000005, 0x5, 0x100, 0x6, 0xffffffff, 0xf6e, 0x5, 0xfffffbff, 0x81, 0x3, 0x1, 0x7, 0x1, 0x1, 0x7, 0x8, 0xffff8001, 0xfffffff7, 0x4, 0x9c5, 0x6, 0x5, 0xff, 0x5a9f, 0x4, 0x8, 0x100, 0x8, 0x0, 0xff, 0xc2e, 0x9, 0x1, 0xf, 0x7ff, 0x34, 0x9, 0xb6d4, 0x5, 0x7, 0x44d, 0x43b, 0x8, 0x6, 0x2, 0x4, 0x3, 0x6, 0x8, 0xfff, 0x9, 0x7, 0x5, 0x7fff, 0x80, 0x2, 0x7, 0x0, 0x225, 0x4, 0x4, 0x1, 0x1, 0x4, 0x3, 0x0, 0x10000, 0x6, 0x2, 0x1ff, 0x10001, 0x2, 0x5, 0x200, 0x0, 0xffffff6d, 0x6c93, 0x3, 0xd5, 0x9, 0x10001, 0x0, 0x4, 0x101, 0x8, 0x10001, 0xffffffff, 0x0, 0xffffffff, 0x7, 0x1, 0x4, 0x4, 0x8, 0x110, 0x3, 0x7, 0x7, 0x3, 0x7, 0x7, 0x5bc, 0xfffffff3, 0x58, 0x0, 0x80, 0x800, 0x6, 0x9, 0x3ff, 0x9, 0xfffffffa, 0x81, 0x7, 0x3, 0x8, 0x1, 0x10001, 0x0, 0xf9b0, 0x2, 0x5, 0x0, 0x9, 0x5, 0x3, 0x7, 0x2, 0x8a, 0x6, 0x2, 0xb09, 0x200, 0x100, 0xffffff40, 0x1, 0x6, 0x80000001, 0xed0, 0x66, 0x0, 0x80000000, 0x1, 0x5c, 0xfffffc01, 0x60b, 0x8, 0x1, 0x6, 0x3, 0x7, 0x6b, 0x7fffffff, 0xfffffff6, 0x6, 0xfb, 0x2, 0x40, 0xd4, 0x2, 0x4, 0x6, 0x7ff, 0x2, 0x6c0453b7, 0x7, 0x6, 0xee, 0x4, 0x0, 0xd14f, 0x9cd, 0xfffff0bc, 0x10000, 0x4, 0x2, 0x95, 0x5, 0x8, 0x100, 0x5, 0xfffff3c3, 0x6, 0x401, 0x0, 0xffffffff, 0x4, 0xec, 0x1, 0x7, 0x4, 0x9, 0x7, 0x7, 0x2, 0x400, 0x1ff, 0x8, 0x4, 0x1000, 0xeda5, 0xc7b, 0x3, 0x6, 0x6, 0x730, 0xfffffffa, 0x80000000, 0x7ff, 0x6, 0x9, 0x7, 0x48, 0x9b, 0x5, 0x51, 0xbf7, 0x1, 0x6, 0x9, 0x8, 0x2, 0x78, 0x5, 0x1, 0x2f, 0x8, 0x8, 0x1, 0x8001, 0x7f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x8, 0x5, 0x7fff, 0x0, 0x3, 0x1, 0x0, 0x9, 0x7bba3b63, 0x101, 0x6, 0x400, 0x2, 0x4, 0x8711, 0x4, 0x2c, 0xfffffff9, 0xc, 0x7, 0xd8dc, 0x8, 0x7, 0x7, 0x8, 0x522, 0x1ff, 0x3, 0x10001, 0x1, 0x7, 0x9, 0x7, 0x4, 0x7fff, 0x7, 0x7fffffff, 0x2cca, 0x7fffffff, 0x4, 0x66f, 0x3, 0xfffffc01, 0x8, 0x5, 0x3, 0xa, 0x1000, 0x1, 0x213c, 0x1, 0x7, 0xff, 0x1, 0x6, 0x9, 0x3ff, 0x7, 0x9, 0x4, 0x46dc6052, 0xb21, 0xffffffc1, 0x2, 0x6, 0x101, 0x9fd, 0x7, 0x9, 0xd, 0xc, 0x353, 0x4, 0x4, 0x43, 0x8, 0x1ff, 0x6, 0x28, 0x4, 0x7, 0x3, 0x2, 0x7, 0x0, 0x8, 0xa6, 0xebfa, 0x8, 0x2, 0x7, 0x9a, 0x3, 0x5, 0x81, 0xbc1, 0xcaa8c3e6, 0x2, 0x81, 0x6, 0x10000000, 0x1, 0x7, 0x9, 0x3, 0x3, 0x7fff, 0x4, 0x3, 0x0, 0xfffffff8, 0x1, 0x5, 0x6, 0x7, 0x7fff, 0x4, 0x4, 0x8b, 0x4, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x7, 0x8, 0x0, 0x3f9f26e8, 0x8ca, 0x3, 0x29, 0x1, 0x2, 0x5, 0x6, 0x5, 0xe61, 0xc, 0x8, 0x10001, 0xca7, 0x7, 0x7, 0x200, 0x2, 0x3, 0x3, 0x3, 0xc8, 0x4, 0x9, 0x200, 0xbff, 0x3, 0x4, 0xc, 0x6, 0xe29a, 0x1000, 0x4, 0x55756530, 0x564f, 0x9, 0xffff6755, 0x2, 0x7fff, 0x65ef, 0xdd, 0x7, 0x6, 0x6, 0x5, 0x8, 0x9, 0x80, 0x1, 0xffffffff, 0x5, 0x3, 0x5, 0x9, 0x8001, 0x7, 0xe, 0x6, 0x7, 0xfffffff9, 0x4, 0x6, 0x8001, 0x8, 0x3, 0x10000, 0x100, 0x1ff, 0xf, 0x8c, 0xffff8000, 0x3, 0x1, 0x200, 0x3, 0x1, 0xd, 0x0, 0x4, 0x3, 0x6, 0x7, 0x0, 0x3, 0x5, 0x180, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x0, 0x7, 0x0, 0x5504, 0x0, 0x0, 0x7, 0xffffbf52, 0x9, 0xff, 0x6, 0xcee, 0x14, 0x6, 0x4, 0x4, 0xffff, 0xfffffff7, 0x9, 0x6, 0x81, 0x7, 0x0, 0x926e, 0x47b7, 0x0, 0x100, 0x1, 0x8, 0x1, 0xfffffff7, 0x8, 0xffff0001, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x4, 0x6b, 0x2, 0x0, {0x13, 0x1, 0x8, 0xb, 0x72, 0x5}, {0xa, 0x0, 0x5, 0x0, 0x100, 0x9}, 0x8, 0x3ff, 0x8}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.081901359s ago: executing program 0 (id=3365): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r3, 0x1f4d2000) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf25060000000c009900020000003700000005005300010000001c00e7006fd9f41c9ef06229bdba2aaeb8b6f0a06eb02500000000001300e800ffffffffffff00002c0017800400030004000200040003000400040004000300040003db4889f879b8762324f72dbe00040006000400030004000400040005000a00180003030303030300000500530001000000"], 0x9c}, 0x1, 0x0, 0x0, 0x24040004}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 640.591936ms ago: executing program 0 (id=3366): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 637.90453ms ago: executing program 1 (id=3367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x90) 600.680542ms ago: executing program 0 (id=3368): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x19, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 527.017374ms ago: executing program 1 (id=3369): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044805}, 0x4804) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20045800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f00000002c0)=""/189, &(0x7f0000000380)=0xbd) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000005c0)={r3, &(0x7f00000004c0)='\x00', 0x80000, &(0x7f0000000500)={@align=0x3, {0x7, 0x8001, 0xbe, 0x7}}, 0x6, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r4, 0x401, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000d00)={{r3, &(0x7f0000000840)='802.15.4 MAC\x00', 0x40, &(0x7f0000000880)={@align=0x2, {0x5, 0x528, 0x800, 0x80000001}}, 0x80000001, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x9}, 0x4, &(0x7f0000000c80)=[{0x3, 0x8001, &(0x7f0000000940)=':]$\x00', &(0x7f0000000980)="7198e3bd4dd4af78dee08fb31ecec840bf829487df75a5b40200d9d42afe78b3c6e91fc031d5f6b7ab696aa4cd350d6db67b1d1d2339242d8aae9220b61cfe6a0dcb513d6aee85f672351cd8ecfe85c3e85dd64578fc78ad202e333408e15900ae0cc568a9fdf85fc620fd569da388a37afae5cbf7f1b5f2c35b84f29cb73a1a343456b918858885b34d5109b3fbc0fb8abcce454726f3b87c34398e06c152929df6bbb31fd931b4c9e27d238e04", 0xae, 0x2}, {0x3, 0xb754, &(0x7f0000000a40)='*^\x00', &(0x7f0000000a80)="0251dfd1afb5346d75ad84a8cf5a97a2e82914ee096c3daafd2248142c978dfdb457ce629ae28f5addd451ebfa5e57bc7871aaaea0a57e6c6f0caf41fe610987ceefbb20759a5e2440e9a038270f9804a6a1bb70931468ba708a146459c5a4da21900a23ad8ed923e1592ac34a6abc945d193230752c13b35253677cf675c920dde1", 0x82, 0x20}, {0x3, 0x0, &(0x7f0000000b40)='\xbf[-{\x00', &(0x7f0000000b80)="768256fbfa5c837f6b09", 0xa, 0x8}, {0x1, 0x1, &(0x7f0000000bc0)='wpan1\x00', &(0x7f0000000c00)="5ee226d8600520274fc39bfa51e31cb7b60542b806b06050127ddc9c79b6a6c962e12677b90b0db52dc6c05f36d49a8854de2cd1fba2b30da3364edfecbe4e7aa3fc78da88ee8a1a234c58cabaa25a35938bd5d884", 0x55, 0x3a}]}) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0xc2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @generic={0x7, 0xe, 0x3, 0x70, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ec0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x1b, r14, 0x8, &(0x7f0000000f00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000f40)={0x5, 0xf, 0x80000000, 0x7fff}, 0x10, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f80)=[r8, r14, r14, r14, r14, r8], &(0x7f0000000fc0)=[{0x3, 0x1, 0xb, 0xb}, {0x0, 0x1, 0x5, 0x6}, {0x1, 0x3, 0x2, 0xb}, {0x3, 0x2, 0x5, 0x4}, {0x2, 0x3, 0x2, 0xb}, {0x1, 0x2, 0x3, 0xc}, {0x1, 0x4, 0x0, 0x3}, {0x5, 0x4, 0x1, 0xa}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001100)=r15, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000001140)={0x40}, 0x4) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000001180)=[{r16, 0x48}, {r12, 0x500}, {r6, 0x1000}, {r14, 0x410}, {r6, 0x500}, {r8, 0x8}, {r12, 0x113}], 0x7, &(0x7f00000011c0)={0x77359400}, &(0x7f0000001200)={[0x2]}, 0x8) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, r17, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x4010000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r14, 0x84, 0x1a, &(0x7f00000013c0)={0x0, 0x1d, "1c4a797aed137309faf301ec22f3f817157942de5f3def4a4918de0876"}, &(0x7f0000001400)=0x25) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000001440)={r18, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x3, 0x6, 0x7, 0x27aa, 0x7}, &(0x7f0000001500)=0x98) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004104}, 0x20040004) r19 = syz_genetlink_get_family_id$nfc(&(0x7f00000016c0), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r19, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x60006225f4eb595e}, 0x20000001) 424.677028ms ago: executing program 2 (id=3370): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x190) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) 385.467499ms ago: executing program 0 (id=3371): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff00000000020000000000008a", @ANYRES32=0x0, @ANYBLOB="1800020000000000200012800b0001006272696467650000100002800c002100ffffffffffffffff"], 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x7d4165c9) listen(r7, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xff) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xa}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x4, 0xfd}]}, &(0x7f0000000240)='GPL\x00', 0x8}, 0x94) socket$l2tp(0x2, 0x2, 0x73) r11 = socket$inet6(0xa, 0x2, 0x0) getsockopt$MRT6(r11, 0x29, 0x1e, 0x0, &(0x7f00000000c0)=0xfffffffffffffe6f) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) 321.075407ms ago: executing program 4 (id=3372): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8b, 0x0, 0x1, 0xe5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x8, 0x8}, 0xc) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f00000002c0)={'some', 0x20, 0x7, 0x20, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x24, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x0, 0x1, 0x2, 0xb, 0x4, 0x30, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0x1, 0x6, 0x2, 0x6, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, @jmp={0x5, 0x0, 0xa, 0x8, 0x9, 0x18, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xa}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x24, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x0, 0x1, 0x2, 0xb, 0x4, 0x30, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0x1, 0x6, 0x2, 0x6, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, @jmp={0x5, 0x0, 0xa, 0x8, 0x9, 0x18, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xa}, 0x10}, 0x94) 319.943872ms ago: executing program 1 (id=3373): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x20000, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x2, 0x4}, [@coaddr={0x14}]}, 0x104}}, 0x0) 192.671582ms ago: executing program 4 (id=3374): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x9, 0x7, 0x5, 0xffffffffffffff2f, 0xffffffff, 0x9}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0xcb, &(0x7f0000000080)=0x6, 0x4) 168.89072ms ago: executing program 2 (id=3375): ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000000000)=0x6) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000000000)=0x6) socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x1, 0x0, [0xdc, 0x7, 0x3, 0x7, 0x7], [0x3, 0x2994, 0xfffffffffffff36f, 0x3, 0x3, 0x18000, 0x9, 0x7, 0x0, 0x100000001, 0x2, 0x5, 0x985, 0x10000, 0x0, 0x9, 0x2, 0xb, 0xfffffffffc22005b, 0x5, 0x80000001, 0x2, 0x7, 0x5, 0x4, 0x9, 0x7fff, 0x4d, 0x1, 0xffffffffffffffff, 0x7ff, 0x8, 0x6, 0x7, 0xfffffffffffffffb, 0x6, 0x1, 0x9, 0x80000000, 0x8, 0xff, 0xf, 0x100, 0x36, 0x4, 0x0, 0x8f, 0x5, 0x44b2, 0xc, 0x3, 0x10, 0xffffffffffffffff, 0x9, 0x2, 0x8, 0x7fff, 0xffff, 0x8, 0xffffffff, 0x7fffffffffffffff, 0xffffffffffffff3e, 0x3, 0x80, 0xfffffffffffffe00, 0x97b, 0x0, 0x80000001, 0x4, 0x3e, 0x5, 0x200, 0x89, 0x8, 0xffffffffffff0001, 0x8, 0x7, 0x3, 0x8d8a, 0x610, 0xfffffffffffff064, 0xfffffffffffffffd, 0x0, 0x4, 0xa9, 0x1, 0xffffffffffff0001, 0xe7, 0x5, 0x3ff, 0xc3ab, 0xfffffffffffffc59, 0x8, 0x5, 0x3, 0xffff, 0x5, 0xfffffffffffffffb, 0x7, 0xffffffffffffffe5, 0x3, 0x1, 0x23b0, 0x8, 0x7, 0x0, 0x2, 0x8001, 0x8, 0x800, 0xa, 0x5, 0xfffffffffffffe01, 0x2, 0xd8, 0x0, 0x4, 0x2, 0x2, 0x4, 0x3]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={0x0, "cbd3aa5f8c659583786b6c422408f33c"}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001480)={0x0, 0x61, 0x0, [0x0, 0xee5, 0x6, 0xffffffffc7cc9ad0, 0x1ff], [0x7, 0x9, 0x5e, 0x4, 0x101, 0x800, 0x0, 0x3, 0x10000, 0xc, 0x3, 0x5, 0x1, 0x9, 0x7fffffffffffffff, 0x0, 0x77e, 0x7, 0x80, 0xa477, 0x3, 0x9, 0x8, 0x4, 0x2a2, 0xffff, 0x5, 0x8, 0x7f, 0x0, 0x6, 0x3, 0x28, 0xe4, 0x64ca, 0x4, 0x81, 0x7ff, 0x4, 0x8, 0xffff, 0x2, 0x100000000, 0x0, 0x5a, 0xc2ca, 0xbec, 0x3, 0x3, 0xb, 0x3, 0x5, 0x100000001, 0x0, 0x9, 0x3, 0x100, 0x8, 0x100000000, 0x0, 0x80000000, 0x0, 0x4, 0x2, 0x7fffffffffffffff, 0x9, 0x1, 0x200, 0x6, 0x7104, 0x5, 0x6, 0x8, 0x5, 0x9, 0x3, 0x100000000, 0xea, 0x897, 0xa4, 0xfffffffffffffff3, 0x4, 0x5, 0xb, 0x401, 0x6, 0x1, 0xd, 0x1, 0x2, 0x1, 0x2, 0x7, 0x8001, 0x200000000000000, 0x1, 0x3, 0x2, 0x498d7ab1, 0x914, 0x7fff, 0x5, 0x1, 0x100000001, 0xd65b, 0x401, 0x100, 0x7, 0x4, 0x7, 0x3, 0x9, 0x4, 0x9, 0x6, 0x3, 0x40, 0x7, 0x8, 0x33, 0x9]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001480)={0x0, 0x61, 0x0, [0x0, 0xee5, 0x6, 0xffffffffc7cc9ad0, 0x1ff], [0x7, 0x9, 0x5e, 0x4, 0x101, 0x800, 0x0, 0x3, 0x10000, 0xc, 0x3, 0x5, 0x1, 0x9, 0x7fffffffffffffff, 0x0, 0x77e, 0x7, 0x80, 0xa477, 0x3, 0x9, 0x8, 0x4, 0x2a2, 0xffff, 0x5, 0x8, 0x7f, 0x0, 0x6, 0x3, 0x28, 0xe4, 0x64ca, 0x4, 0x81, 0x7ff, 0x4, 0x8, 0xffff, 0x2, 0x100000000, 0x0, 0x5a, 0xc2ca, 0xbec, 0x3, 0x3, 0xb, 0x3, 0x5, 0x100000001, 0x0, 0x9, 0x3, 0x100, 0x8, 0x100000000, 0x0, 0x80000000, 0x0, 0x4, 0x2, 0x7fffffffffffffff, 0x9, 0x1, 0x200, 0x6, 0x7104, 0x5, 0x6, 0x8, 0x5, 0x9, 0x3, 0x100000000, 0xea, 0x897, 0xa4, 0xfffffffffffffff3, 0x4, 0x5, 0xb, 0x401, 0x6, 0x1, 0xd, 0x1, 0x2, 0x1, 0x2, 0x7, 0x8001, 0x200000000000000, 0x1, 0x3, 0x2, 0x498d7ab1, 0x914, 0x7fff, 0x5, 0x1, 0x100000001, 0xd65b, 0x401, 0x100, 0x7, 0x4, 0x7, 0x3, 0x9, 0x4, 0x9, 0x6, 0x3, 0x40, 0x7, 0x8, 0x33, 0x9]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000018c0)={0x0, 0x4, {0xfffffffffffffffb, @struct={0x5, 0x3}, r1, 0x7, 0x9, 0x9, 0xab, 0x7ff, 0x489, @usage=0x400, 0x4, 0x9, [0x9, 0x80000001, 0x1200000000, 0x3, 0xe0c, 0x80]}, {0x9, @usage=0xc000000000000000, r2, 0x2, 0xffffffffffffffff, 0xffff, 0x8000, 0x6, 0x0, @usage=0x2, 0x1, 0x80000000, [0x5, 0x5, 0x6, 0xffffffffffff0000, 0xe2e7, 0x800]}, {0x1, @usage=0x1000, r3, 0x8, 0x5, 0x6, 0x8000000000000001, 0x5, 0x0, @struct={0x9, 0x7}, 0x7, 0x0, [0x5, 0x0, 0x8000000000000001, 0x400, 0x100000001, 0x8]}, {0x7ff, 0x40, 0x4}}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000001cc0)) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4208000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r4 = epoll_create(0x2) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000001f00)={r0, &(0x7f0000001e00)=',:\'@-/*[$\\*[\x00', 0x240880, &(0x7f0000001e40)={@align=0x2, {0x8, 0x8951, 0x5, 0xa0}}, 0x10000, &(0x7f0000001e80)={@_ha_fsid}, &(0x7f0000001ec0)}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001f40)={'pim6reg0\x00', @multicast}) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000001f80)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000002140)="d0d15ca712fdd7421bf2085b64141da17b", 0x11) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000002140)="d0d15ca712fdd7421bf2085b64141da17b", 0x11) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x30, 0x1411, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x30}}, 0x4001) pipe(&(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xb0, r10, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x8000) (async) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xb0, r10, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x8000) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000002480)={0x80, 0xbd, 0x108, 0x7f, 0x7f, 0x11, 0x10, "f296f82cc14d61229c1fa2a3908a77c82373e18d", "7606efa384eb66d13327535af332a921ac7d78ec"}) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x94, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x6b, 0x8, "abfadbe0f45fe46a561fbc47230a4fed62d6574f97b441d9f65106189b2da4263e1056a5500d92fc2be337702f81f6bc85cebac0beac0ee8271aef74e02c35456dd060a37f460ac6de5d26a8417ff8508b25edf70c6458df71bd6a8150c3098381b17187d34a9b"}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000002680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000026c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000026c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000027c0)=0x36, 0x4) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x54, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb4e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48004) 83.522797ms ago: executing program 1 (id=3376): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x5, @private2, 0x7}}, 0xae9, 0x2, 0x10000, 0x1}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={r1, 0x2}, &(0x7f0000000240)=0x8) r3 = socket$igmp(0x2, 0x3, 0x2) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000000540)=""/47, 0x2f}], 0x7, 0x3a4c753, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80042000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x1b0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x154, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x64, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x40000000}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x25}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x303, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r6, 0x8, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0xc001) sendmsg$NFT_BATCH(r4, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000bc0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000fc0)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002300)={0x0, 0x0}, &(0x7f0000002340)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002380)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000002480)=0xe8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002540)=0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000004400)={0x0}, &(0x7f0000004440)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004480)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000044c0)={0x0, 0x0, 0x0}, &(0x7f0000004500)=0xc) sendmsg$netlink(r4, &(0x7f00000045c0)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000000cc0)={0x17c, 0x35, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@generic="293741a352e229e4059645b37ab08a1dbd621168a0afc761287dbdb409eda5b0bb625e2bd3ebce833a4d9f2e888f52a0c78bfdc040427ae6ed6a456fced119d049cfca1e190ef87b675dbdbc479b1e4743c2659fd554a15dedd8204fa37aa56e38604c6c7f83ca1380159a3b15ea8e117e856a8c006b6635ea04f1ca90007b42ad775b1526fa0f2e27ecb7ddb323483f189d5f652fce704f3df85a1be8f2935326ee8dc590bed7c56f0e1ade693c00efa1bf3766c47072ea577a618b6f73a3d69d", @typed={0x8, 0x60, 0x0, 0x0, @fd=r0}, @generic="aa8ff44d869ca56c091de50abf025d281b31f8d67d40a544af1e2b9b60ee2dcc0ff8db8616d389178cf1574d99df3d57513b73f53070a8cbf237e37486f8f2ed19333183cd986f694c5969014413e98ce4a51eba7f36ec24383da33b350c3b2790c43cec20740c448511f6e232f6ae010b5b7ee771d5aebadc6d3f64458519d59bf2a9d907f069b4df8416a708c72b667d929d4d93192ff642d2d17f9444c14ca3"]}, 0x17c}, {&(0x7f0000000e40)={0x150, 0x27, 0x0, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x136, 0x39, 0x0, 0x1, [@generic="4664fceab0a9d03b7949b3ca12897941363dc7df21483f75626761ca7af868d1e830b38c05e4930e782977667adcdee092176df83971e7698a8e6ec0b7f27a1d409e59bbb58404db6100c355daa68b370633a2e3ec3240c36e220c65272444048578366bac8cb794f6d16818", @generic="9c9a99edf648b6451fb499a2369d3cf628d851fdf5a4c47ba2ca605b8e7ebef00dd794b0cef3665d4eb311d3fc1955df886af4d76e06125268e472d3edb9888db713ae21d7edf4685dc28a3f70e314afe3b727affddb32385c54b77b867142967f48b78f8d8efb50525780bfe0b2a531fd537f134486f042db7852d297f8f50b82cdefd255429db70ca3c53a327600390399b96b48874a6e167274b920f0eeae12429b065ad788ca1fdff4ee210373d5e6c1ba08db6036e27b8a4cf57349ff63f4d25397e977"]}, @nested={0x8, 0xdc, 0x0, 0x1, [@typed={0x4, 0x6c}]}]}, 0x150}, {&(0x7f0000001000)={0x12d4, 0x12, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@generic="20c327ee43046a753eb51e0450b2c40b5d4315a28f0fbef9ed06efac15f863f2a7859911023f6fcd65ab63c8af1034bdcc00ec3cdb8f5956831a44f1407797c1e767e298683b6d8960df10d627965106731361e999ce6b5531a7c78835dba915c8310cb505f5c420c7e0da43da9231447332adb5cf8843a5f81d56e1660a8ea7a309c3dd634f849657a8efd83d797bf0ddb0c08429e1517f16a0b5657f88b28e073b30247607db2898a50695b6da6e0284ec75d65d390eeb31f4d5f36a2b8207ab7d0c26a5fb817d60800b8c104d40a8c95c14dfc97e00a5d628f971e267d4ad134c794f025ff65a03f7", @typed={0x6c, 0xc8, 0x0, 0x0, @binary="771da6a0f60a6a8e90a42cb09270ae868d769df46fb843db7c82ef045635666d7bd0ef1b94ff97681fbc44cf2a7f2c1d7d7eb0e0800cedb3511fa72c8974730302c5a80b379bcee3b218aafe41afabfd9bbe7ea75f4876b8ad036e741f768f3aa385b5c9a5ad70c0"}, @nested={0x28, 0x6d, 0x0, 0x1, [@nested={0x4, 0x162}, @typed={0x4, 0xb8}, @typed={0x14, 0x14b, 0x0, 0x0, @str='\'/}$%!+}/^{(\\\\}\x00'}, @typed={0x8, 0x7f, 0x0, 0x0, @uid=r7}]}, @nested={0x1057, 0x139, 0x0, 0x1, [@generic="f1a56004354aa2d0471ce8c84c5798211a75ddcb25966b0463920efbfb7c01bf9c57648a967266faf9dab3d4df1135e4e1528806248fbadc6af8ef9cd9f52b5805336059fcc2fa18550ba9", @generic, @typed={0x8, 0x148, 0x0, 0x0, @u32=0x8}, @generic="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"]}, @generic="2ef7b800638cd74f0e92e2c3059a13d547f9553af525d084d61f3f455912d2ac0b366a638cf3f7a66e06a11acd9736970e6623cd4b06303f26945c459efb87cb049be5839b326af5ce8748b4851cf9e633ac5438db2ce3050ad3194207e2c2835eff828c2bfc92b320b933f5914bd7d625efff11e5ad97568847d857d7151029eb3a09caed6489da25b36a2e8aaf75b1aaf9e1985723637dd3fb143ec6514bee49d68abbf0df5e3ec4eff963c3a745a4f7b0d80f1766dbf84e6787e659fbfca2f44c8fe366576ef7fa6c692fe70760d3a1ae6de7376903710a84e7d636a942edf00a3262cedf90e5cc39b7"]}, 0x12d4}, {&(0x7f00000024c0)={0x4c, 0x37, 0x4, 0x70bd28, 0x25dfdbfe, "", [@nested={0x34, 0x126, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x2}, @typed={0x8, 0x143, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x120}, @typed={0x4, 0xc0}, @typed={0x8, 0x166, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x92, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x46}]}, @typed={0x8, 0x141, 0x0, 0x0, @ipv4=@loopback}]}, 0x4c}, {&(0x7f0000002580)={0x190, 0x41, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x144, 0x0, 0x0, @u32=0x1}, @nested={0x16e, 0x145, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x11e}, @typed={0xc, 0xf4, 0x0, 0x0, @u64}, @nested={0x4, 0x119}, @typed={0x4, 0x6a}, @generic="ea97e3763b08ea18a2206a5c91f0dbb0837889954a528abb1298dc45cb85c07e339fcc6eb9b7f4dfd9a31dd3dd15160aea0f2dbbad039bdf7d30a53ba36aaf85fac4f12a95b0cf2829595684bbda3ddab519826caf5d17d73215286f34d916000aaa8132c3a28df61568cd3d593056746dc63514751a1a00c7ce34d87e17aadf2c573d09be62e8cf96b2b906e7c0d9bb083d5531f55ca1d5d3019dca328c19a007ad5162392cd9baf966ceb49a8f2a508eb555bdb7fd46816c8362d36777cb24cf331b4a90b3437b7d9e75124badca866930a1ffc58b93edc842f3f91b1989891690", @generic="ed09410038059243d088b8616d939bacc77933aa3373e3ad989d432e79b09e1302bd89bd3be8c3bf4060cad9b174b14d3a885a386ba8ba21fb96a23b7a0a6a36773cf7568abc5dd35104b253d802a96a32afb69991d07192d865bd2f7e70394bcfe7d11c9ad1cb34"]}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r0}]}, 0x190}, {&(0x7f0000002740)={0x1554, 0x1f, 0x8, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x1101, 0x87, 0x0, 0x1, [@typed={0x24, 0xbf, 0x0, 0x0, @binary="40b0f433bef7a1483d9036cca819a8134d44c3b1625db2dbaec8a1f59af1bc6e"}, @generic="8823de2af6e5b289e969f5f440b5b6c2764e81b4ef01a8a5fdebe78773d0458474503f6f5f7f93c2cd268b8a36a9508aa993ae324611280d9c4162ae35c616d33a3d9930e06a120ae5ca90e344b4bff3dfface74290c6f7fa5a03a49db654ef8787d2769b142055090a6493d60d601a2a35cec3c1a2cd50bb3106c17a4d24d7be6547c874167c107ae93795bf0f21f4adc992f45221234158d2d915fdd66d4f86dc7674207ced3f1e0a1ed90b7e66ba90b639c8f6caa1314362d7c6c9296199705acce645af04706045aea806e7e8d3866ea04459e819eafa4dae33962697114d3b17c439166c4bae067d10fd81e8d147b5c237b6bece52a855871651bf5c78acce6b4c5c8aba01b248010602d7077a920e253349f63abe79d5f8410f40883ea9bf4662b941c58e6aebb4dd0560a83ff8a5b10182a68bde9f3c2822d600aabee55db1fc7d24ebe796fd56d3b692e2de588d4ccc3806e2068c89dc7d665b13821c747719998f9408aca36547ec45903c30ac42af2ef1b73a74f5532dd2a2918f59bbf7575c631bd74441cfd7658a40a530d2925053fa2d455a35b5af38e9b26932d8932cc88508be4b4a0304fe89ba2bcbc2c08c80ce08048a22ddb75eaef5213642c5f3231a7251d7e6da4b963e921d6f5d9fed316adc94aaf6e8c9a36080f5daaf8c26903cd000fe8efaacb0b7e0342df07d66080a0d02a9f8606165a18cd5fc02f184a16f68cc854682ff5e7d7b5a8d370c2726d0341404faf0fb64a490384975076eac4214dd8c73be26f5063a091fc2f00d22c5dd12b07ef6b420415022548c8ec46e5d38166fc410746dfc3675eca03a4c1bd6c407be8420cc84a4511b50967ffc3a932f70ad1be91088c1b74ae7048fb619b419e3d76b1bdc84f0add78134a338a7283de40cddbe068877bb4c28849f1bc87ee3e59b5a6cb333c6f784591a759057052adba1f343e9fa74d8e058efcfd5bd9f7d03185eee90bb436931b3ae496b90a123110efec6b3c4cec91f66f50697a5f07b3d82deb84488cb164082b72613f3ad7b577dd29c97c8c5652ebf7d93ee47b38e38e3c794f8832df77700a474ade2f5491b0cb8c16befdc6c2d9c35cbf84f5290ac3f5d1d4c28c016fbb54a2d41c62b509469b3a2f7d35d881696e9b95146c63d0f2b3ab7545d8c178744278739238f018b293d9ff446191297e826b435732cafe07be6da7223ba64d34457ec96d6d5d8864fbf8a33a38c2ee32975d9c9e27541a956955ce86110f060fa2d6748f7df4284cf9c48214d2d20967d323625df2306cd20350084172326a099ea811c40b4667ae2f23e13461695501195e6ada7391bb7557e70aa351df6f564dff9596541a829a67d96cae64b8fa9edf64d686d57db9816621c9966665e12cb5e5c62fab1c7bf7f52b61dded970471315078a1e20e2c58d3381d5817b3ea7f7529a5c635071d972e6cc93724d49b339d120f57bfaf9c34dea70101ad4fda2606228ff02c1a4689309a8b38abaed764955375eac92bffb9b428d4668545352c62310599e26d72b9e25e7680c3dc04577c19d9f332091bb7389aef5a5d2ff0eaad9ab6594ebf93526fee638ef9f14e21a407f13670af9ed8140aafed833c4686820d4760bf752de1d14cc51feab2a1023fa3a9a0ed4f1f303b64068629d4f8512fbf6a4830739669140a96e704d990340d4369ce304cc150f13cec2c79731e5e681921140c6b9b8c34e9f096bfc58ddf9f486131d8f357f84c25a2bbb942300de812ef490ab3be875c478950121b276a75a7a24d1de976319dc05e9e4d65dc96188b55e8f390c84c8c11d7c4a6a6b9787b73857fbe0538a28518787d6eb7efd61734cc1a69f0c08b214ae34eed3e4549776f9ceef8dff37474b5e317e90fb602d7f693afc27ea3dce37ea561bdd8312d05a01581d1c6fbae3331e7a8603b4c0e9ec6f80948c4bae6444e58ec201f09b3466c1eab835882882443b0ef8f68ada3c3782453eb7af539124488e5c505a6b5221822b4c39067e18c46919ee16227e37bb235e1910601b2093aa9681853527abd73179d132e7a54d7bb2cd28d520ed5b3d6b0d62cb9b0bd49947725ee68a6b6bb05b74968260105e2026f01a6c5d530b613d8de26003f51bcce3a748ec2a903314b70e1797686c1d86588fb837c24c613866bae938598a5547ff4c007a267f6f48366c979ae06203497b528a416fd0677110ada9940a0a07cf2c7dd356955ce3beebaa298227226adeae04ab3cf6afb2f3d9e470a73d6e89fd592d0aeee81e8524f9776beeed7761400d7bd14a758a657ab674b88ee5d2a1bfc690b7dfb6eea21ae1db7b8e5f8988d4550053cfa460fd6d55d4ac6c9e1b322af7c5c9d66cd42f63962ed7fea34a961e7aa0e2afb3109e628b104213649494003c7557ae5baa3fd55a667ebacbe394cf8940697083d001474cd655da681e9423a4926c4db73b2dda40c2085ca91c5c7f882fa6135ee28c3036577be9608d251a8225ab447c714d35fb4c62d45307bb6c35563498614d9c39c93a0540fe09acb6e4c8cd514b132097d559cfa55d589e241ab6d332600cf0f16977234153b3a09252e75ee32f59c4fd943e2cdf139ecc51ead801f65773ee12a37c45656aace6d363bf265db3ae0a2d28bbb3180a473a8fd73df368a849a73a8388b06873b6488ecc57e63cd1fd41add2b2651c191e3429379d8c26cd2861eedc887a8797119e271943d438144be7e73c45529b93e566805c6666c5369a53989e9246c23c71728064968e65b2937aafba982ca1ce47d7a27ab2790c7f4596af55eee2ba5930288a4e5b526a0bc846d331f50bee02ea62df22ad98f727e372a01f8f89b7b04a40950dd470007ea1141e6b7290726779519e24603bddb2b43c7084146cc2ff83ab65f2b6db79c00d24ddb39a6cfcf63b755f841dadfe4ea6409ba538155ab121e1d59669ad6d9dcbbd4c75f0099351a1e3d7926d53ac362abb027b769e30d42f5bbff933b43c869a889510bb03bdc188234f632be6f8aa14d670e811f41ca26f9f39cbd7b819d80791ed971b23a0ca770fc3e15699461d497e524b7c467f1610dd50a70ae41183b0d74d89060a91a9f1e04c3bc470dae7d74fc1dbacec9ffa1dd2cfad67554ee3bbcf5d1ffa713449adb1700c45d0f3e0280e21147327128470079e4332823ffb1160788ac16d3243d2148d8aa21af6db0935acb7de51aa0935156a94fc83f5db575708def78e2cf25668bb45e08433211d039f2ebd960516fb898e037c1e9787f28986d702cf38b6845334b66c376f59c15461a41974d51b9a5f29f1f06b65296c70915dad94ce771da179f54c8cfc402a0be3a3f1e96a2086bc65fd4db1d02d7360a64eee5af1489f9b81163dcc258a22d451df260bf1c76e4f1808308d320bcabcabdaa7b741653083b9f0af1a2826d908fb64ca6c77647b0952bb3039b8afd2370290685b6a0de262c838a8f14b8571c37ac9de6b654e90d5440b62122478f1f4687d9ec4f6e734adba0da0c00d988af642d5d052e4fa923c8dd7e272b2e121d5e0d3898f3020c8993f3bcf695f585cf04cf0f548f443e2093dc16eea3f42b2f061e21a79f58f6fb561d10bb1ca902eefe59b25b9ba9e64d6dd41c45636c69bbcce375b6f645ceeae04308c788ded1e91df65b9cd1868df1ea18008c6432790a49666aff777bf8e7981c78ae783589c1c8010e7654508b7a2af4e754d0bad64386766446440e37214e0c6391b648459e3f4babba14a74e3f58e47e1a78c32bef087fc4c13023d3ccdc325a62ecbd85c5651e3e002787357162a139e0ca7e3d4257eeb6e6dce294842abc00eec6fe35ad4a2893e993f9959a26bfbfce587d61e16d425cd9c2cfd61d0487ff26acc494f72dc7a71ab6766867e6981b5caa8152a789d6df9712d6bfa561dd461389ffc6f84115d29f8a5510e29404a2fe0fd002f9a8942fb96f2f6243e44f24249d2068284cc1edeaa7403622f62c9264a95865f8c0fe01c6a03585fe4e31322c8466ed4bcd1315e7de3d4548cf136b2bc63af4d872ca0d2fc10fa8d6ca9439b0fa15c5d3d5c74c85a00acd4e90e7e5b80c2daafa4fb879f04579b6172f89fc2a87e18a1036714fc498b4c6cf0285ce4d093570de0caf789e467ded818bbea8f40f15d9710949161113e9c8c56bfb3810b582848edb40f78be798614c11b66a09a5cc1ffc7d960d4d88e54d5be4fe971df09e344012390d42fd1cf24eab899c8126fbaaa6fe5fa31cf539b3c79d878fd24669705fb4d8431c300a7fa306f18abdde1711e15dd67da70e5a8755d015e1e29d86233622489b893f687c3c651e94b6b666ed39a6467ae60d583db7839a71466b2c40afaf25ad3d591b8a11c2d139923e3208ca251d0430154a584ddbcc595e5a96834b5905ab09e9ebc6d93b8b0901204c09f8a8821f9d73ff2f3bb2e182dda42644cbf2f76eebde9606246ba1a301610e1ba8540114149a2cc723ec4cce6097f09d56f3ac27450a679fa6120a4d562bdb1f8ed4684c4925d36fd7998c4b0d27891f22d874498d8d0bd061e2e4aab0463f444d8feab64cdb73138c41f80b3ac37c10a573e2dd525bbf069c68488f4d65363c738cbdf422ea4c5c4b3329a4144451ebb325c321d33fc90590faf8ea7b8fcb2fd67df3d86ba3667be1453fd2543c1c5a69d013bd5a89a3dfb111d104a7e1d2336e5fb5312e82d503a2fc24eded3417475b7c021f3cb6e475423e82c01d0b00236d77574064b3c18271aade2de41391d991a105b51606d5f0ba2b22e0e25e218fc5612ca4355ff9cd5adddd8918d22346b28cd83c8ecdd642138ad6051ffe0d4e908ce0e1162c14b9fc51fd054d5ac707dba656c8b44a202a15541e7852c7853c6a6a099306824faf6eba7e35149020b49259e2970d58cda9396bd33c4622ed5df5e924faea985a596149c89cb6ddf039930508dafcc6928b43153d23921c4e8c4717c2a67606228f082136959983d6144823045b3a9fd7cde70adb1eb4291dc3f5fd3bd535bc088f718c33099ffe14590b17757ec00405b28c98af4977215b19d7ffde61463fd7fec4afa8eef446161345a76cf72f4a7523ae2c98a614e8dfbe46bb201f157569ab13c9cd5407877b5fd746ba73716e33648863349b0cfb257337681fadc3718d2ac1d00d057d688158b20dfcb5e49edb3633797193407fc05decf807bf49e70a8dc6aefb1d704c3ebcfeb63a1d3a31b7257bce8a90447f62922cf9ab86ddfea26e06e2ad7dd3e94ad1966f16137df14928eaf9c38056609a195c14787f0b0d88085c1aeeb1e16c66b94fec5810d8809f7ec502ecc9fec5f9998e94191d75288eb6778fe49ebb83b9a580f33f08b0dda5c9a2126e8cc174a365e9b06f4e810d0eae677456e8453d49409b6947c962408d69715536e34fde4261e9f5cec25a341891f385a3ea0df432018cb9dd30bd064574660c3ff6542b828a9f029b8fe27ca7c056d8d1adeb66d392e30addf45ede7bf9a50cb449e4d2b652ddcb1e2616d7ea14aac83589d828568e444b25793766503f3b92d4b4e6509befb7673f2b37b9a17e3358675ec758c61bdaee1843752d5d4dcc486f1928716fac3355f69fd1fcb428d05afb6ea4d659f43332aec18db3ee5d9929c290dbf4790f33c2144b7277bea405c783dc5279a64ca63550074ce1509c9333200dafeebaf7462fce6e3ced3a9ccfc2083924c6ccd540e45cce689553a40b9607366641bf230f8a87468a008c14832048831de22835becb487da64eb748193bb19c0a339a3e29", @nested={0x4, 0x8e}, @generic="67f2d0ca88edbf5ba731a836075b8079194e605336e0954e959ca2d87a2b3fcbada45ed52fb94a8fca32f785d60829c88f1fdf12b0666ded86d9165347f82cc2695249de2b1c8977ac5a12adaa33422d8e22ac6bb80f6514eee481c9fafd63e196245f6f76addd50aacbfe7b47a7160dd7fa0e2db9ded97117999d76a1a4d147f2eec8670d04613d8c04f5076ac949905c52df72331bdeaf2da72f3ff85c4c2b1d3077f9ea4eadf21e775ac35b12d79245adf49aee576f164a8f509159edaab8ae804d09a0f313b66a5a534cb98658f9ceeb6b3acd"]}, @generic="da1fb1125593259d0537d428760d47a09fe3b7", @nested={0x10, 0x38, 0x0, 0x1, [@nested={0x4, 0xe7}, @typed={0x8, 0x10a, 0x0, 0x0, @fd=r4}]}, @generic="8bd063b9c001016d59561130dca937610429644d1e90297c1df2dfe33d67b203211a3dc32049c532d6e941533ed0df42bdbc6631895915b73714a31343ae7cfc50441fa1dd35cee76b526971fe83cb212ddbd5f47d8703e431b341eb1d6e33297b78e9e11a39f918b4ee6c0c35d87f7dcbe3824957f7ae121014df3ff8190b06c18ecd30c0588ddb82cc17d9845a1a42015b1690944b03935c5bafb28bcce14a85d6221b222eb1815df069c84ca43b5fb9a97902c999dd0ea41f1f05541ce31065c9f722127a8c2b7dadf8eebc689d834949eecf99c14617a871107cf6782e3e9123f3198904a1ba9b3f97", @generic="eb4783159c80c368321afaf00d2aec9e0b22f9d928b77f91198bc74f77db46bcaecdf3c236a479e4118bf59fe112bdf02d58aa87464676544ff4c59b982e9a8681edb4bd25705d5f728696074bffee2c831935aa7ea6495fc00787019d90d29f55aea4874c7b22574e1d48bf8849074d1867c4065500344934a74307e2fa35ac396620014ff20be3c919f7c79fd37a225e58941e2a7a751960005cef3ffbc86fc565186f390172eee6af87ee85263e9948fec3ca5613f375e228f3cbd15c8fdc77ac48001dca312f05ac", @nested={0x18c, 0x103, 0x0, 0x1, [@nested={0x4, 0x3}, @generic="6ca2d7df0befe013cc6b9545b289414b1bc5de768fa15b5f2ae897a698557e05f01c494eaf352eeea5f1157a97146f892b7c16b2680390013da20866764692ae0f785f04f6021c82dfa04368e0cee2e7b7cf783629fad7b53a33fe74f9496bfe41fb9e863f1826c786aee989da46c6965c488af457d4b94d3b4e1d231d265d3a80f0c94117cdf4b534098ae17e08400c7d23c4a77459f065f33eaf1d90285373915dc6529a23ea2062e7af5a805dc4703bd115a002391bdda459651c15fa50b4d4", @generic="15ff0283a9456b16aa3811163641d65201f16083a909ba76d999bfd49af75a13db34b6efcac305f32532e238042b47ba9bfc97df21213b87b87f78a21581239de0b64c253c72986b76d39ef419f97e5aab22c8646de6ae97a0c81ad6961f583ad23e54e72b0b321c7cbb70a033a29da63f19fe7a93e051ce2311163823098bbbd28708e51e21b26e2f6d69a5299ba4ddb1eff0d8eb7d24", @typed={0x4, 0x2c}, @typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x6e}, @nested={0x4, 0x4}, @nested={0x4, 0xd4}, @typed={0x8, 0xd5, 0x0, 0x0, @str='@k+\x00'}]}, @typed={0x6, 0x76, 0x0, 0x0, @str=':\x00'}, @nested={0xd4, 0x151, 0x0, 0x1, [@typed={0xb, 0x1c, 0x0, 0x0, @str='tunnel\x00'}, @generic="1e118a3b67d1c2717f7c2f99f31ecf9f9d1abe2fec9b032926f47424ed1bcd443f813bcf1102807acfa5e3faeebc76817f8c20b1159502d7b1dab0d510e3ffa90549304906fdb6e57162f7dc0d4b78484c05a49ae4c4a3b87b1d9a86a2d0", @generic="32e962a0374fb64efe6e2fea4ab0d561c800aa6f77c709b8db632fd548017bb0cd9202bd4480c2d716f31ab940", @typed={0x8, 0xef, 0x0, 0x0, @u32=0x9}, @generic="666ff4c6f3f3a7ec8d800e01f3071641cb8874663c48f4ade75d8ff3ed562b9e7292ad1288dab44bb74c859b658969c5d8"]}]}, 0x1554}, {&(0x7f0000003cc0)={0x4d4, 0x1b, 0x1, 0x70bd25, 0x25dfdbfc, "", [@generic="57284b90c024ce218addd7ab268e67c5deade07219de033157322cd37802f02ea680e001a7d0a22b51e42139c005de92d34b5daa83b9e460be316e47789c19746b679c8fcaf697cf798d0e967f8fa45b5a001982eaebc60c52b952aaf7a9b4f210b82cbe0a21cc7605a68c2380bc9365a7c996", @nested={0x261, 0x12d, 0x0, 0x1, [@generic="c983c172d66ece7710456b6d4db6171426e7e11033808c795848cfc65b26d295f770a3f218639f30c9b1d999c046b417ecc5adeae28cc655b726f5aff2707f6d6e59d444760f9f974724fd92d11452915a855dfa62dc54c6351d89fa0850618385fd06ff41fd86ea014363708a6d122bec3b1053e42d7d0404d8937ca02d69f2158d492afc0d2773683cb8cddf86137f0888bac83f48d59e019abb066e673acfc8d8a8b42c8426c798f4bf06ec7329e4af464f3dd985d9179a6a0ba46f0f6c128a8577a9b0755051dbb4", @typed={0x14, 0x150, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x5c}, @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x8}, @generic="43a7e1b0a92e69d1f08b52d2eced5713577527f9dccb033b427c51c866ccbbededdad7c929bbeab9c20d30618a3b4878cca4571b9cf42688647a5b7c3e152921e5c6ea4efbb0686565ff264df8875f44dc255ae10da5a98a93757dcf8191d5d2f49a14fc00d24c66b33d40839c7d1e04aad6e26440c97ec8d658f1a0a341c9d7e64d72accda300205ec9446f571624c5e30f2130e5083535b87d1b28666f52f99867fb7a", @generic="68b09dd8c98b57c5597800154d58a38df46b7809c22d225e84dea191368b919be5ce7c95aec860d07336132367ebbe15e5595b538d7a460eb1c55e783125fe4ce76ec287f28d1b883bb80d35b1d543753bc12b957cd07667be8451662561b8059682df7990cf66cf67dd04acc0437c7ac77c73443733ab1ec55ad012", @generic="32a0cb0d72e998df59c9846d697b2484bc033bacf9f76ddcf59a22c34e0b0eacad53476e9c28f243bcb64566837eb4a27aff4213fef9d7c7a0522f06ef2365cf187ff961ec8e14", @typed={0xc, 0xba, 0x0, 0x0, @u64=0x9}]}, @typed={0x8, 0x47, 0x0, 0x0, @uid=0xee00}, @nested={0x1e1, 0x103, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0x23}, @typed={0xc, 0x127, 0x0, 0x0, @u64=0x5}, @generic="620b059092e9f2f1cd7e719be580134b819a875cdd70a0a00538f434e912f280cebcca3314ee38d8dd81b9e0c78c304460898c4822f6a3f2dcfe8a7df8a1bfe8f22e71907c5431ae35156cb0f6df1b5cf613fadb0a3f7749173745ba262a3ccdc420eb41c1fcdcf081b86509253403ef790394fcec4071cd7ece427fd3cdbab44c182cff8ecefe58f66090c42de4fc3513b11338e7ff5d27172cac1d746a8b95e5eae62fdaf7c756ffcbef690b5bfb4b2a525ad0daedfc60d5d9f5ce9ba58d18a041d414e30f1e819908cefb6d201188f2c7d17b9fc05109e95f0edbe0f3e2d3721883f591a13c90448b353345e021c32696", @generic="f6bf22e8f9284c7ffe1c8589ff8b0518fda48d3ec464c9277827e393064dcf687937649e9b2271bb434a57bbd9b0ab21c080c2d0eb40", @generic="8f0ea8352c1c2cad55335298d236487729090eebe052a29bf7b84035a117726319c9aa1f50cf155bf6c3e4c0a70895c45cb10abe73cb4e41529ab102f65b9f7f85905b3f67faf3865a5422a7b6b2f194f68be1071e1d38a54da77f5311b7ba95f850301c8e93bd121f647e5718965ab0c475c5e217e2a0c5040ae75aa927e5f0ded0cc199605f535c7d9976d122109d6686e35c232b49a5f5b66dbfa5db2d2d752"]}]}, 0x4d4}, {&(0x7f00000041c0)={0x190, 0x23, 0x100, 0x70bd26, 0x25dfdbfc, "", [@typed={0x52, 0x77, 0x0, 0x0, @binary="b33e420d513b83f444bf026e5cccdc0bcc663ed31d556ace7f437a106713a9206054eeb09ee584285a87149bc31016b05468696a53512575c25723fe525aa68dd6b0f9a471f5992e413a984e8a52"}, @generic="17f50033214c757c538b9444e663567cd4b0b0e3b9084cc342555c8c88a810dd4b921a503cefe158d2a536e06d92ff544d25727be82b5f38d5dc877d3e22d956146e504014dc972aa609d109587a7deb7ea2ad0be7efc1557aea080e76760cbb88c0bd2221170e1b422c15cf5122bda2f0b85b5702d1254992fd7738560dc6e171cabf1ff50c2dd9351d7a317f", @generic="a03b0eac98ae5ec9cc1d6de2604aeaa25fc31df38d900b3e0134bc77f366b7edcbb379b91b0f18a7f7a31266a9ae8a6c60ac0b5ee2401fd747529b77b05a7ede15f26a4dde9dc51418360e164172dce0786f6023e9ab90fdfbd1ebf6a4373bdc82d746b717ffe7678a878deb6ef7731f3b6617d024005c8048b29e301c3012058da2fa1930c6d9b341b854bbbd0d47e983217f185df06ceb5f64c718d0d2"]}, 0x190}], 0x8, &(0x7f0000004540)=[@rights={{0x2c, 0x1, 0x1, [r5, r5, r5, r0, r0, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x50, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000004600)={r2, 0xfffffffb}, 0x8) getpid() sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000004740)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x54, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) r14 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000004780), 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f00000047c0)={[{0x2b, 'io'}, {0x2d, 'devices'}, {0x2b, 'net_prio'}, {0x2d, 'net_prio'}, {0x2b, 'pids'}]}, 0x27) sendmmsg$sock(r3, &(0x7f0000005380)=[{{&(0x7f0000004800)=@generic={0x20, "793d95fc2477c6ee8ba6a3ac1639d0fcd45c6d59b5fe502daf43645c5e683ab6bb810d8dc72af42b3e9ee048704299c7d5c7acdd1fae7aadc32575273c61b9ba40142d7bac8d421b2903f38e8aeeb255b1ea17dc184cd784fbdaa081c9fbe055c8b27bd77029af13a8b6727f4fe3778923124e824c57754f2cd099e3bba0"}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004880)="223e234b7fefb41c6571661d3d9caffeb60be89c6dc415391922c5454f1722bfef77d5011a27ec8c36552f2a3386306f8701e76bb953bb16bf2c64938afe7a9c458c99d50f9dc59add78b4f3cc833542d69ba2b3e257707782e5d75c58a91905c9a1b8b04915ee", 0x67}], 0x1, &(0x7f0000004940)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}}, {{&(0x7f0000004980)=@x25, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004a00)="aff6109735f69bf2e7f6b57980f4fcd9d9ef66a43647bc56b78de5a2d82bac086a34cda1d742be9ff26b6f2cd02ba0946f2723afbac8c7fd66b65a44fc4ffd3b8787ca17a763c984763e577feeb09717675c1dc45cf61067c1abdc1e72e6769865964423ed809efcd9965bb099c8a00dda8f9dbc25f141386866f7f7f5a12f1bbe05e72da8", 0x85}, {&(0x7f0000004ac0)="63549f44740f0afa86407c2d034089900c744cf7d20cda7b43aad05c0f57eb70a5", 0x21}, {&(0x7f0000004b00)="dfdf990121757cbd2932cdeb477852b952c2314307480b855dad84656bc33d2127f20c492a16ad2b62daffbfa18bf59cd30f83f3f2ee8ffb590d4a3d5ba0d27a5751b903805accb47a6dc0f5d3d4", 0x4e}, {&(0x7f0000004b80)="327382a76799756fe00ab98b9cce43e3e6649340b302fb38db481595f893d92103cdbe66c2f4e96a5ca52d4cfa6a28cabb6bfe915398c22ddfe9828e0a432adffcf653366523955d3510abaed95fef91c44c42070bed1e309daa18b0767cac538929d4ad6480958b4a82b60a6ec215ef6ebbd306bf4c43741a30e26135f5c4ea4f8321", 0x83}, {&(0x7f0000004c40)="c7b05030e018b1d73a91bc76f7c79c2496a755bc02968a9101fd2e501f2802ed0a701e698c849bfe3baa28bec59220c31c349352c610276d232f34a74c7df8e6a56c3cda835ec7c83530dce64492899563faacd954fe4e", 0x57}, {&(0x7f0000004cc0)="3e8f9cb04c54d176e2c9b4dc06fd5cba10ac32f1a9f97797c6d1607775c397c0a668dbc370d1a1b59495ad820929aba4b6b8a3f22f6980e12834c6cf4b", 0x3d}, {&(0x7f0000004d00)="6de5df2f86409bd047780eb0727047cced8703003c5e979d4db415a4cfe04284236484035bf4507277f4d83000439bfef1172df236bfe620dc83585c154a46c0f049fb3818a32314cb8f920e66effda0506203c41309b6dd47a03a43f0109a419c772507d360238533b9224dd061c5ef8be4f3483e16118f784e969673f5d4898ef7fd7e91b3ccf971d93341ed0a7fb19546b87b46c6490180862b3860b9712120c0245bd643b19dd2902c5c6cd706ebcf4182db1ab50b97ae7443ea55bebed660f7a54979b63d5cd7cd3ca99e93f3ed483916dd2d7a58", 0xd7}, {&(0x7f0000004e00)="d62928fed068958cf0ddc20608cf833677049ec3a2775aa88a513f2dfbd48380dc26d4c37c6ed5fabfebfdb4c62e658d9f8a0d6cf024e3b60ff5ddb1a375d0061a99a60f445750e07af28f37b8a4e78b10b6774a37933d26e4dfcf106ebe336cc8acac7ac7cd7173bf958cac2ec72b960ff42a", 0x73}, {&(0x7f0000004e80)="25838aaf3b13dcff5ce1248aa13f10006e0ec9c6b9fd73138375ed34ae18db55ad9a08789f968e026eb6472c", 0x2c}], 0x9, &(0x7f0000004f80)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x18}}, {{&(0x7f0000004fc0)=@llc={0x1a, 0x320, 0xa4, 0x7, 0x7, 0xb5, @broadcast}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005040)="9afa76a8dfddf4c7e3a819b7cbcdb4f1615230c2566ff05dea33e1655bc78e8df4c2904f7a4d57bf416e105e9219da64c73ba091223e676219ca37ea767b8cf7712863a8f8275a1e10a1de3a9c2149479e71c2f2d61ea6258237e59937af06dea3ee0af458541a8c498160af7208ba8cee09ebaa2fb480675c4aae28853f85e2219702c9550382d223eb07cf7f764702", 0x90}, {&(0x7f0000005100)="0adefc19ea55b071c60353e0eed2", 0xe}, {&(0x7f0000005140)="7d861465eeff0d8d56fbf1665abd5d309a1204b211efd7e423776a9297fb", 0x1e}, {&(0x7f0000005180)="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", 0xfe}], 0x4, &(0x7f00000052c0)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x395c}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}}], 0x3, 0x4004000) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000005440)={@broadcast, @loopback, 0x0, 0x1, [@private=0xa010101]}, 0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000005480)={r1, @in6={{0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005540)) 701.05µs ago: executing program 4 (id=3377): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0x2, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="18001d8014000080060005003000000005000c0000000000"], 0x34}}, 0x0) 0s ago: executing program 2 (id=3378): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x3e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) (async, rerun: 64) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r5, 0x2f, 0x7, 0x5, 0x1, 0x22, @local, @loopback, 0x7800, 0x1, 0x11, 0x3}}) (async, rerun: 32) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000000011424203008f"], 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000200000030000180140001800800828c3f72845501007f00001508000200e00000020c00028005000100000000000c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001400000000008000340000000000800aa6af36bac187533e6253a161bafee13"], 0x8c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x20, r13, 0x21, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x50) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r14, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="110000005500010004000000000000000700000003a31036dccdbb851f820649175f29f36fee89e5d566c745fe077e70922e9cd36409bc9ea22ad58218ac4cce4276bc94d0e56876453a37e06e74a1e9162bae4cb68e7d12cd262b66320cefb55b6df0a9a67835ed7dfbd11f7f1e79342bea5e7c661c0624076f8ac06e", @ANYRES32=0x0], 0x18}}, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): IP: 0033:0x7f391239de59 [ 341.725322][T12426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.725339][T12426] RSP: 002b:00007f3913288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 341.725361][T12426] RAX: ffffffffffffffda RBX: 00007f3912625fa0 RCX: 00007f391239de59 [ 341.725375][T12426] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 341.725386][T12426] RBP: 00007f3912433e6f R08: 0000000000000004 R09: 0000000000000000 [ 341.725399][T12426] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.725411][T12426] R13: 00007f3912626038 R14: 00007f3912625fa0 R15: 00007ffd80624428 [ 341.725444][T12426] [ 341.725544][T12426] Mem-Info: [ 341.790563][T12424] xfrm1: entered allmulticast mode [ 341.799935][T12426] active_anon:6108 inactive_anon:0 isolated_anon:0 [ 341.799935][T12426] active_file:0 inactive_file:42580 isolated_file:0 [ 341.799935][T12426] unevictable:768 dirty:40 writeback:0 [ 341.799935][T12426] slab_reclaimable:10843 slab_unreclaimable:102149 [ 341.799935][T12426] mapped:29347 shmem:1366 pagetables:1236 [ 341.799935][T12426] sec_pagetables:0 bounce:0 [ 341.799935][T12426] kernel_misc_reclaimable:0 [ 341.799935][T12426] free:1316850 free_pcp:11603 free_cma:0 [ 342.132905][T12426] Node 0 active_anon:32600kB inactive_anon:0kB active_file:0kB inactive_file:170132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125876kB dirty:152kB writeback:0kB shmem:12388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13276kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 342.202804][T12426] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 342.236699][T12426] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.313359][T12426] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 342.332129][T12426] Node 0 DMA32 free:1302864kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35400kB inactive_anon:0kB active_file:0kB inactive_file:170132kB unevictable:1536kB writepending:152kB zspages:0kB present:3129332kB managed:2548792kB mlocked:0kB bounce:0kB free_pcp:38440kB local_pcp:13712kB free_cma:0kB [ 342.385138][T12426] lowmem_reserve[]: 0 0 0 0 0 [ 342.400734][T12426] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.461138][T12426] lowmem_reserve[]: 0 0 0 0 0 [ 342.476356][T12426] Node 1 Normal free:3946732kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.524238][T12426] lowmem_reserve[]: 0 0 0 0 0 [ 342.540397][T12426] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 342.595195][T12426] Node 0 DMA32: 1055*4kB (UM) 368*8kB (UME) 200*16kB (UME) 215*32kB (UME) 207*64kB (UME) 75*128kB (UME) 34*256kB (UME) 12*512kB (UM) 10*1024kB (UME) 5*2048kB (ME) 301*4096kB (UM) = 1308316kB [ 342.668909][T12426] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 342.689181][T12426] Node 1 Normal: 1*4kB (M) 1*8kB (M) 6*16kB (UM) 8*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946732kB [ 342.708529][T12426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.779300][T12426] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.815719][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 342.824858][T12426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.858889][T12426] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.871482][T12463] netlink: 'syz.4.1806': attribute type 15 has an invalid length. [ 342.891108][T12426] 43871 total pagecache pages [ 342.907638][T12426] 0 pages in swap cache [ 342.924826][T12426] Free swap = 124996kB [ 342.938686][T12426] Total swap = 124996kB [ 342.952704][T12464] team0 (unregistering): Port device team_slave_1 removed [ 342.960502][T12426] 2097051 pages RAM [ 342.970649][T12426] 0 pages HighMem/MovableOnly [ 342.980391][T12426] 428172 pages reserved [ 342.987412][T12426] 0 pages cma reserved [ 343.038392][T12463] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1806'. [ 343.060416][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 343.077339][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 343.197620][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 343.249963][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 343.388571][T12496] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1813'. [ 343.788284][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1817'. [ 343.826266][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1817'. [ 343.865936][T12515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1817'. [ 344.493420][T12553] pim6reg: entered allmulticast mode [ 345.319071][T12581] syzkaller0: entered promiscuous mode [ 345.343369][T12581] syzkaller0: entered allmulticast mode [ 347.312038][T12710] syzkaller0: entered promiscuous mode [ 347.327793][T12710] syzkaller0: entered allmulticast mode [ 348.093685][T12748] lo speed is unknown, defaulting to 1000 [ 348.116560][T12748] lo speed is unknown, defaulting to 1000 [ 348.166901][T12752] nft_compat: unsupported protocol 0 [ 348.252799][T12748] lo speed is unknown, defaulting to 1000 [ 348.341293][T12748] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 348.367185][T12756] __nla_validate_parse: 11 callbacks suppressed [ 348.367202][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 348.382047][T12748] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 348.463527][T12748] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 348.588311][T12748] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 348.707994][T12748] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 348.940706][T12748] lo speed is unknown, defaulting to 1000 [ 348.975314][T12748] lo speed is unknown, defaulting to 1000 [ 349.012619][T12748] lo speed is unknown, defaulting to 1000 [ 349.047125][T12748] lo speed is unknown, defaulting to 1000 [ 349.100880][T12748] lo speed is unknown, defaulting to 1000 [ 349.136168][T12797] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 349.416645][T12804] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 349.440356][T12804] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 349.449078][T12810] netlink: 1116 bytes leftover after parsing attributes in process `syz.1.1887'. [ 349.495960][T12804] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 349.517373][T12804] netlink: 'syz.2.1885': attribute type 2 has an invalid length. [ 349.550617][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 349.578192][T12804] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1885'. [ 349.595121][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1890'. [ 349.643603][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 349.838817][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 350.063965][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 350.107650][T12855] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 350.175962][T12855] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.461968][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1904'. [ 350.653954][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'. [ 350.692810][T12882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.158698][T12909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.587766][T12931] vlan3: entered allmulticast mode [ 351.734030][T12947] netlink: 'syz.4.1921': attribute type 10 has an invalid length. [ 351.802852][T12947] bond0: (slave dummy0): Releasing backup interface [ 351.902476][T12958] xt_hashlimit: size too large, truncated to 1048576 [ 351.928719][T12947] sctp: [Deprecated]: syz.4.1921 (pid 12947) Use of int in max_burst socket option deprecated. [ 351.928719][T12947] Use struct sctp_assoc_value instead [ 352.060411][T12968] openvswitch: netlink: IP tunnel dst address not specified [ 352.118183][T12974] openvswitch: netlink: IP tunnel dst address not specified [ 352.326728][T12983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.422134][T12981] vlan2: entered allmulticast mode [ 352.452458][T12981] bridge4: entered allmulticast mode [ 352.488251][T12985] bridge4: port 1(erspan0) entered blocking state [ 352.558489][T12985] bridge4: port 1(erspan0) entered disabled state [ 352.605125][T12985] erspan0: entered allmulticast mode [ 352.657313][T12985] erspan0: left allmulticast mode [ 352.804094][T12998] geneve2: entered promiscuous mode [ 352.997983][T13010] netlink: 'syz.1.1934': attribute type 1 has an invalid length. [ 353.250832][T13014] bond5: (slave gretap1): making interface the new active one [ 353.261917][T13027] xt_hashlimit: invalid rate [ 353.289012][T13014] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 353.687201][T13052] netlink: 'syz.0.1943': attribute type 4 has an invalid length. [ 353.762945][T13059] netlink: 'syz.0.1943': attribute type 4 has an invalid length. [ 353.859909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.081390][T13069] __nla_validate_parse: 6 callbacks suppressed [ 354.081409][T13069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1948'. [ 354.084777][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 354.168403][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 354.180221][T13072] nbd: must specify at least one socket [ 354.189385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.484867][T13085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1950'. [ 354.565563][T13060] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 354.709295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.718661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.932298][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1959'. [ 355.217227][T13132] sctp: [Deprecated]: syz.0.1963 (pid 13132) Use of int in max_burst socket option. [ 355.217227][T13132] Use struct sctp_assoc_value instead [ 355.680005][T13149] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1965'. [ 355.749394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.758005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.773452][T13154] netlink: 'syz.0.1969': attribute type 13 has an invalid length. [ 355.887029][T13162] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 355.909770][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 356.139682][T13162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 356.294473][T13185] netlink: 'syz.4.1979': attribute type 1 has an invalid length. [ 356.304784][T13185] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1979'. [ 356.585403][T13198] netlink: 'syz.0.1982': attribute type 9 has an invalid length. [ 356.789344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.799595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.938244][T13207] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1984'. [ 356.949273][T13207] openvswitch: netlink: Message has 512 unknown bytes. [ 357.631330][T13256] Cannot find set identified by id 65534 to match [ 357.727158][T13260] tc_dump_action: action bad kind [ 357.744756][T13258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.827590][T13264] ip6tnl0: Caught tx_queue_len zero misconfig [ 357.834137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.843376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.248234][T13292] bond0: entered promiscuous mode [ 358.265617][T13292] bond_slave_0: entered promiscuous mode [ 358.282477][T13292] bond_slave_1: entered promiscuous mode [ 358.298708][T13292] bond3: entered promiscuous mode [ 358.314334][T13292] batadv0: entered promiscuous mode [ 358.331411][T13292] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 358.354231][T13292] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 358.384648][T13292] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 358.419346][T13292] bond0: left promiscuous mode [ 358.424250][T13292] bond_slave_0: left promiscuous mode [ 358.437548][T13303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2011'. [ 358.440296][T13292] bond_slave_1: left promiscuous mode [ 358.462206][T13292] bond3: left promiscuous mode [ 358.490283][T13292] batadv0: left promiscuous mode [ 358.707517][T13320] batadv_slave_0: Caught tx_queue_len zero misconfig [ 358.740957][T13277] syz.2.2003 (13277) used greatest stack depth: 19208 bytes left [ 358.869245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.881074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.940468][T13344] mac80211_hwsim hwsim6 wlan1: default FDB implementation only supports local addresses [ 359.291926][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 359.395926][T13365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2023'. [ 359.412499][T13365] syzkaller0: entered promiscuous mode [ 359.421757][T13362] netlink: 'syz.1.2021': attribute type 4 has an invalid length. [ 359.439265][T13365] syzkaller0: entered allmulticast mode [ 359.448379][T13369] netlink: 'syz.1.2021': attribute type 4 has an invalid length. [ 359.635058][T13377] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2024'. [ 359.956978][T13388] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 359.977947][T13388] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 360.153190][T13403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2030'. [ 360.913682][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 360.949254][ C1] net_ratelimit: 3 callbacks suppressed [ 360.949273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.964738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.281856][ T30] audit: type=1107 audit(1783357327.292:2): pid=13464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='šæ#ÍÇÄäÿ [ 361.281856][ T30] x,!éÁ#–‹^`ãîøÁ,€uLƽôKޤ÷Ëzk¤]Ñ*ôG}½ÜWG0ÕŽHŒN€,ÒIÿÄíÆàDš°yêª.š‚€J,“+J¶qõøbý´«‹Å ¦õ&ÝÐ!ÎÛ¨ôrµÊë®ãÃ8/€bU,¥X|.Cötúñ@Æ›’¨–¢5*/KËðØ’N' [ 361.415040][T13473] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 361.603262][T13473] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.999561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.010681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.115682][T13514] gre1: entered promiscuous mode [ 362.132110][T13514] gre1: entered allmulticast mode [ 362.374493][T13527] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 362.406129][T13527] bond5 (unregistering): Released all slaves [ 362.422736][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2071'. [ 362.771670][T13571] ipvlan1: entered promiscuous mode [ 362.782471][T13573] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 362.784738][T13571] ipvlan1: entered allmulticast mode [ 362.809897][T13573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.810498][T13571] veth0_vlan: entered allmulticast mode [ 362.819507][T13573] IPv6: NLM_F_CREATE should be set when creating new route [ 362.831027][T13573] IPv6: NLM_F_CREATE should be set when creating new route [ 362.854152][T13573] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 362.863048][T13573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.871157][T13573] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 362.882621][T13573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.901184][T13577] netlink: 'syz.0.2079': attribute type 3 has an invalid length. [ 362.909817][T13577] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2079'. [ 363.029253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.038681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.153303][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 363.154769][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2083'. [ 363.178375][T13588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2083'. [ 363.236974][T13588] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 363.260582][T13588] bond8 (unregistering): Released all slaves [ 363.547218][T13605] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 363.579318][T13605] netlink: 'syz.4.2088': attribute type 2 has an invalid length. [ 363.682301][T13617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.691526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.728273][T13617] sit0: Caught tx_queue_len zero misconfig [ 363.772513][T13622] IPv6: Can't replace route, no match found [ 364.069465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.078094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.130955][T13634] bond7: Removing last arp target with arp_interval on [ 365.829626][ T4939] Bluetooth: hci4: command 0x0406 tx timeout [ 366.159347][ C1] net_ratelimit: 4 callbacks suppressed [ 366.159366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.174054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.189360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.198601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.136399][T13709] syz.4.2115 (13709) used greatest stack depth: 18312 bytes left [ 368.229563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.238483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.408622][T13741] __nla_validate_parse: 8 callbacks suppressed [ 368.408639][T13741] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2120'. [ 368.476831][T13746] netlink: 'syz.1.2121': attribute type 3 has an invalid length. [ 368.506988][T13749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2122'. [ 368.696061][T13751] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 368.752178][T13751] bond5: option packets_per_slave: allowed values 0 - 65535 [ 368.785569][T13751] bond5 (unregistering): Released all slaves [ 368.964268][T13773] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.2127'. [ 369.229000][T13792] xt_hashlimit: size too large, truncated to 1048576 [ 369.269353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.278143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.360629][T13795] IPVS: length: 4096 != 8 [ 369.410899][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2135'. [ 369.925964][T13830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2141'. [ 370.115012][T13840] netlink: zone id is out of range [ 370.127038][T13840] netlink: get zone limit has 4 unknown bytes [ 370.141893][T13843] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 370.147232][T13840] netlink: 'syz.4.2143': attribute type 13 has an invalid length. [ 370.175610][T13840] netlink: 'syz.4.2143': attribute type 27 has an invalid length. [ 370.206302][T13843] 8021q: adding VLAN 0 to HW filter on device bond6 [ 370.461903][T13858] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2146'. [ 370.531311][T13862] netlink: 'syz.4.2147': attribute type 32 has an invalid length. [ 370.539968][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 370.574664][T13865] netlink: 'syz.3.2148': attribute type 26 has an invalid length. [ 370.606822][T13866] netlink: 'syz.4.2147': attribute type 7 has an invalid length. [ 370.610318][T13862] bond5: Setting coupled_control to off (0) [ 370.625455][T13866] netlink: 'syz.4.2147': attribute type 7 has an invalid length. [ 370.650675][T13869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2149'. [ 371.349242][ C1] net_ratelimit: 2 callbacks suppressed [ 371.349261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.364594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.597515][T13897] syzkaller1: entered promiscuous mode [ 371.603319][T13897] syzkaller1: entered allmulticast mode [ 371.684729][T13903] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 371.714401][T13903] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.732396][T13903] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.741051][T13903] bond8: (slave gre2): The slave device specified does not support setting the MAC address [ 371.752881][T13903] bond8: (slave gre2): Error -95 calling set_mac_address [ 371.833737][T13903] gretap0: entered promiscuous mode [ 371.843643][T13903] bond8: (slave gretap0): making interface the new active one [ 371.852526][T13903] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 371.868597][T13903] macvlan0: entered promiscuous mode [ 371.874926][T13903] macvlan0: entered allmulticast mode [ 371.881519][T13903] bond8: entered promiscuous mode [ 371.890702][T13903] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 371.901711][T13903] bond8: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 371.914410][T13903] bond8: left promiscuous mode [ 372.389420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.398213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.635158][T13821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.662791][T13905] netlink: 'syz.3.2156': attribute type 3 has an invalid length. [ 372.694410][T13905] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2156'. [ 372.857277][T13908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2157'. [ 372.987487][T13922] bond0: entered promiscuous mode [ 372.997575][T13922] bond_slave_0: entered promiscuous mode [ 373.020955][T13922] bond_slave_1: entered promiscuous mode [ 373.035428][T13922] bond3: entered promiscuous mode [ 373.243998][T13939] macvlan0: entered promiscuous mode [ 373.401547][T13941] tc_dump_action: action bad kind [ 373.429236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.438179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.525161][T13957] validate_nla: 5 callbacks suppressed [ 373.525179][T13957] netlink: 'syz.4.2171': attribute type 4 has an invalid length. [ 374.061758][T13991] __nla_validate_parse: 5 callbacks suppressed [ 374.061778][T13991] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2178'. [ 374.201307][ T30] audit: type=1107 audit(1783357340.222:3): pid=13997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Æþ'¥UÄï¥Î]‚ÙØníp¿3b×\åß}“2Ì(Èç7.ñq&دhâôDÇÿR+£xÍ÷9"þÖ¿o¨Ä¡k­¯€x½r6ÚǧÖä)3±%[´âÃÓ®—LÕ2à°a¡^0`(@&8ok⛎Ó*i;c1ÍæŒä3k,컈ÖÜ‘ô^(LŽm|¢,h0õ1Öéº^ö6w«kj?w' [ 374.382038][T14012] netlink: 'syz.1.2185': attribute type 2 has an invalid length. [ 374.479530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.488461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.599789][T14025] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2188'. [ 374.624920][T14025] unsupported nlmsg_type 40 [ 374.733862][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 375.358686][T14055] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2196'. [ 375.404086][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 375.509208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.518536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.613161][T14077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2202'. [ 375.765140][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2203'. [ 375.988263][T14097] netlink: 9632 bytes leftover after parsing attributes in process `syz.2.2208'. [ 376.205682][T14109] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2212'. [ 376.367247][T14112] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2215'. [ 376.403992][T14127] netlink: 'syz.4.2217': attribute type 5 has an invalid length. [ 376.425512][T14127] netlink: 'syz.4.2217': attribute type 6 has an invalid length. [ 376.456737][T14131] netlink: 'syz.4.2217': attribute type 5 has an invalid length. [ 376.485455][T14131] netlink: 'syz.4.2217': attribute type 6 has an invalid length. [ 376.549596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.558721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.781643][T14145] sit2: entered allmulticast mode [ 377.211927][T14176] tunl0: Caught tx_queue_len zero misconfig [ 377.589333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.598251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.608228][T14204] sctp: [Deprecated]: syz.3.2237 (pid 14204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.608228][T14204] Use struct sctp_sack_info instead [ 377.730172][T14210] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 377.907079][T14216] netlink: 'syz.3.2241': attribute type 49 has an invalid length. [ 378.539252][T14245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.633218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.641961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.125911][T14273] __nla_validate_parse: 19 callbacks suppressed [ 379.125931][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 379.277557][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 379.669344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.678763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.948650][T14328] syzkaller0: entered promiscuous mode [ 379.961178][T14328] syzkaller0: entered allmulticast mode [ 380.226898][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2281'. [ 380.291073][T14348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2283'. [ 380.324503][T14346] netlink: 'syz.2.2282': attribute type 1 has an invalid length. [ 380.352179][T14346] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2282'. [ 380.418474][T14348] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 380.447809][T14348] bond9 (unregistering): Released all slaves [ 380.511308][T14358] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2284'. [ 380.587819][T14356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2284'. [ 380.709461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.108624][T14382] macvtap0: entered allmulticast mode [ 381.114507][T14385] netlink: 2872 bytes leftover after parsing attributes in process `syz.3.2292'. [ 381.125727][T14385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2292'. [ 381.134939][T14382] veth0_macvtap: entered allmulticast mode [ 381.150108][T14386] netlink: 2872 bytes leftover after parsing attributes in process `syz.3.2292'. [ 381.558148][T14412] netlink: 'syz.3.2300': attribute type 4 has an invalid length. [ 381.580738][T14415] netlink: 'syz.0.2301': attribute type 11 has an invalid length. [ 381.581312][T14413] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 381.631524][T14413] syzkaller1: group set to 0 [ 381.749307][ C1] net_ratelimit: 1 callbacks suppressed [ 381.749325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.764403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.035366][T14438] Unsupported ieee802154 address type: 0 [ 382.574878][T14462] syzkaller0: entered promiscuous mode [ 382.584743][T14462] syzkaller0: entered allmulticast mode [ 382.683664][T14474] netlink: 'syz.1.2311': attribute type 21 has an invalid length. [ 382.790586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.799669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.829318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.837900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.869425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.878897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.042247][T14441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.308830][T14496] xt_TCPMSS: Only works on TCP SYN packets [ 385.489934][T14500] syzkaller0: entered promiscuous mode [ 385.502420][T14500] syzkaller0: entered allmulticast mode [ 385.577444][T14510] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 385.588785][T14510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.600545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.653088][T14505] __nla_validate_parse: 10 callbacks suppressed [ 385.653106][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2323'. [ 385.677646][T14508] vlan1: entered allmulticast mode [ 385.684527][T14513] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 385.693159][T14513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2322'. [ 385.703609][T14508] bond0: entered allmulticast mode [ 385.709393][T14508] bond_slave_0: entered allmulticast mode [ 385.721102][T14508] bond_slave_1: entered allmulticast mode [ 385.722257][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2323'. [ 385.730635][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 385.747906][T14508] bond3: entered allmulticast mode [ 385.796715][T14515] xfrm2: entered promiscuous mode [ 385.811552][T14515] xfrm2: entered allmulticast mode [ 385.852663][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 386.093685][T14526] syzkaller0: entered promiscuous mode [ 386.101321][T14526] syzkaller0: entered allmulticast mode [ 386.114444][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 386.125741][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 386.137275][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 386.959428][ C1] net_ratelimit: 3 callbacks suppressed [ 386.959485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.974159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.999292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.008290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.943849][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 388.979513][T14546] netlink: 'syz.3.2337': attribute type 1 has an invalid length. [ 389.011022][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 389.029489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.038677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.203707][T14563] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 389.262544][T14566] netlink: 'syz.2.2344': attribute type 1 has an invalid length. [ 389.281699][T14567] netlink: 'syz.4.2345': attribute type 1 has an invalid length. [ 390.069742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.079066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.097750][T14617] xt_TCPMSS: Only works on TCP SYN packets [ 390.308497][T14627] syzkaller0: entered promiscuous mode [ 390.317170][T14627] syzkaller0: entered allmulticast mode [ 390.356052][T14627] tipc: Enabled bearer , priority 0 [ 390.366157][T14633] tipc: Started in network mode [ 390.371493][T14633] tipc: Node identity e0000001, cluster identity 4711 [ 390.378351][T14633] tipc: Enabling of bearer rejected, failed to enable media [ 390.401494][T14633] syzkaller0: entered promiscuous mode [ 390.407402][T14633] syzkaller0: entered allmulticast mode [ 390.932770][T14639] nbd1: detected capacity change from 0 to 63 [ 390.956915][ T5637] block nbd1: Receive control failed (result -32) [ 390.957349][ T1729] block nbd1: Send control failed (result -32) [ 390.967885][ T4939] block nbd1: Receive control failed (result -32) [ 390.972875][ T1729] block nbd1: Request send failed, requeueing [ 390.989810][ T1729] block nbd1: Dead connection, failed to find a fallback [ 390.991210][ T10] block nbd1: Dead connection, failed to find a fallback [ 391.005672][ T1729] block nbd1: shutting down sockets [ 391.006949][ T10] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.013369][ T1729] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.025515][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 391.033667][ T1729] Buffer I/O error on dev nbd1, logical block 0, async page read [ 391.041627][ T10] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 391.059218][ T10] Buffer I/O error on dev nbd1, logical block 2, async page read [ 391.078765][ T10] Buffer I/O error on dev nbd1, logical block 3, async page read [ 391.081634][T14623] tipc: Resetting bearer [ 391.088763][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 391.102739][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 391.111526][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 391.119484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.119561][ T10] Buffer I/O error on dev nbd1, logical block 2, async page read [ 391.128212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.135517][ T10] Buffer I/O error on dev nbd1, logical block 3, async page read [ 391.152057][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 391.161807][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 391.170101][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 391.198658][ T1729] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 391.211063][ T1729] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 391.226137][ T1729] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 391.238074][ T1729] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 391.248096][ T1729] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 391.257837][ T7865] ldm_validate_partition_table(): Disk read failed. [ 391.268728][ T7865] Dev nbd1: unable to read RDB block 0 [ 391.278761][ T7865] nbd1: unable to read partition table [ 391.300931][ T7865] ldm_validate_partition_table(): Disk read failed. [ 391.312491][ T7865] Dev nbd1: unable to read RDB block 0 [ 391.322719][ T7865] nbd1: unable to read partition table [ 391.376206][T14623] tipc: Disabling bearer [ 391.741192][T14688] __nla_validate_parse: 12 callbacks suppressed [ 391.741211][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2384'. [ 392.149333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.159269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.590989][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'. [ 392.608513][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 392.626900][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2398'. [ 392.697375][T14749] netlink: 'syz.2.2402': attribute type 4 has an invalid length. [ 392.717601][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'. [ 392.737244][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2398'. [ 392.771753][T14751] syzkaller0: entered promiscuous mode [ 392.777538][T14751] syzkaller0: entered allmulticast mode [ 392.915952][T14755] erspan0: entered promiscuous mode [ 392.925705][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 393.010794][T14733] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 393.185618][T14770] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2410'. [ 393.199524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.208572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.427353][T14784] gtp1: entered promiscuous mode [ 393.435080][T14784] gtp1: entered allmulticast mode [ 393.481417][T14789] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 393.489999][T14789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2417'. [ 393.546562][T14785] bond6: option fail_over_mac: invalid value (16) [ 393.571217][T14785] bond6 (unregistering): Released all slaves [ 393.592225][T14795] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2418'. [ 393.621483][T14789] team0: Port device geneve1 added [ 393.634773][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.657500][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.690552][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.729807][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.057118][T14813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.229329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.239657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.831379][T14856] netlink: 'syz.0.2430': attribute type 1 has an invalid length. [ 395.236165][T14885] netlink: 'syz.4.2439': attribute type 1 has an invalid length. [ 395.264097][T14885] netlink: 'syz.4.2439': attribute type 2 has an invalid length. [ 395.272854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.281947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.330966][T14885] netlink: 'syz.4.2439': attribute type 1 has an invalid length. [ 395.811923][T14868] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 395.861382][T14868] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 396.309834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.319248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.347282][T14950] netlink: 'syz.0.2455': attribute type 12 has an invalid length. [ 396.865632][T14982] __nla_validate_parse: 15 callbacks suppressed [ 396.865652][T14982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2463'. [ 396.961246][T14987] netlink: 'syz.1.2463': attribute type 4 has an invalid length. [ 396.987316][T14982] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2463'. [ 397.103003][T14989] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 397.120502][T14989] bond11 (unregistering): Released all slaves [ 397.151736][T14992] veth0_to_bridge: entered promiscuous mode [ 397.179061][T14993] veth0_to_bridge: left promiscuous mode [ 397.187044][T14999] netlink: 'syz.3.2466': attribute type 10 has an invalid length. [ 397.202141][T14999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2466'. [ 397.235379][T14999] net_ratelimit: 1 callbacks suppressed [ 397.235396][T14999] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 397.337445][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2468'. [ 397.349839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.358991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.806986][T15025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.106207][T15050] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2485'. [ 398.207740][T15051] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2485'. [ 398.348294][T15055] syzkaller0: entered promiscuous mode [ 398.353944][T15055] syzkaller0: entered allmulticast mode [ 398.364379][T15059] syzkaller0: entered promiscuous mode [ 398.375799][T15059] syzkaller0: entered allmulticast mode [ 398.389205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.398520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.428120][T15062] geneve2: entered allmulticast mode [ 398.823223][T15084] netlink: 'syz.0.2493': attribute type 4 has an invalid length. [ 398.879365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.889445][T15086] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2493'. [ 399.439463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.448539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.473254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.482115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.694560][T15073] vlan0: entered promiscuous mode [ 400.710681][T15073] vlan0: entered allmulticast mode [ 400.729185][T15073] veth0_vlan: entered allmulticast mode [ 400.752670][T15085] tipc: Resetting bearer [ 400.875568][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'. [ 400.940572][T15103] netlink: 768 bytes leftover after parsing attributes in process `syz.1.2496'. [ 400.984696][T15103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2496'. [ 401.080352][T15114] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 401.414718][T15133] bond9 (unregistering): Released all slaves [ 401.871588][T15165] syzkaller0: entered promiscuous mode [ 401.877111][T15165] syzkaller0: entered allmulticast mode [ 402.101840][T15179] netlink: 'syz.2.2520': attribute type 1 has an invalid length. [ 402.428392][T15188] __nla_validate_parse: 8 callbacks suppressed [ 402.428410][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2522'. [ 402.549572][ C1] net_ratelimit: 2 callbacks suppressed [ 402.549592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.564525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.105655][T15211] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.2523'. [ 403.127382][T15211] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.2523'. [ 403.136971][T15211] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2523'. [ 403.599641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.608840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.630035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.639246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.903321][T15229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.912509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.017905][T15213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 405.034800][T15213] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 405.264653][T15255] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2530'. [ 405.307616][T15213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.326214][T15213] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 405.394908][T15213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 405.432872][T15213] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 405.465436][T15264] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2533'. [ 405.507620][T15213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.525921][T15267] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 405.532074][T15213] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 405.589865][T15213] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 405.633176][T15213] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 405.669427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.678901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.804587][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2538'. [ 405.937666][T15291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2541'. [ 406.105382][T15300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2545'. [ 406.551340][T15322] netlink: 'syz.1.2549': attribute type 1 has an invalid length. [ 406.747830][T15334] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2553'. [ 406.870826][T15341] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 407.008052][T15348] xt_hashlimit: size too large, truncated to 1048576 [ 407.053749][T15356] ip6tnl0: Caught tx_queue_len zero misconfig [ 407.075006][T15355] netlink: 'syz.1.2559': attribute type 2 has an invalid length. [ 407.251116][T15355] : entered promiscuous mode [ 407.446352][T15373] netlink: 'syz.0.2565': attribute type 2 has an invalid length. [ 407.749365][ C1] net_ratelimit: 2 callbacks suppressed [ 407.749384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.766010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.909008][T15398] __nla_validate_parse: 3 callbacks suppressed [ 407.909028][T15398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2569'. [ 407.998909][T15407] erspan0: left promiscuous mode [ 408.086637][T15413] netlink: 'syz.4.2573': attribute type 12 has an invalid length. [ 408.115432][T15407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.130518][T15407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.186327][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'. [ 408.239044][T15407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.251994][T15420] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2575'. [ 408.285472][T15407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.306719][T15407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.328540][T15407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.367765][T15407] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 408.412401][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.419718][ T77] bridge0: port 1(bridge_slave_0) entered listening state [ 408.492809][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.500077][ T77] bridge0: port 2(bridge_slave_1) entered listening state [ 408.789339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.799245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.929835][T15456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2579'. [ 409.174135][T15471] netlink: 'syz.2.2583': attribute type 4 has an invalid length. [ 409.210850][T15471] netlink: 'syz.2.2583': attribute type 4 has an invalid length. [ 409.228021][T15473] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 409.243357][T15473] netlink: 'syz.4.2584': attribute type 11 has an invalid length. [ 409.263956][T15473] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2584'. [ 409.268428][T15471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.489026][T15480] lo: Caught tx_queue_len zero misconfig [ 409.546421][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'. [ 409.809649][T15503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.085178][T15515] lo speed is unknown, defaulting to 1000 [ 410.892246][T15565] syzkaller1: entered promiscuous mode [ 410.903984][T15565] syzkaller1: entered allmulticast mode [ 410.911792][T15567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2607'. [ 410.926237][T15565] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 410.980455][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2608'. [ 411.143495][T15582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2610'. [ 411.154285][T15582] openvswitch: netlink: Flow key attr not present in new flow. [ 411.183326][T15583] netlink: 'syz.2.2611': attribute type 23 has an invalid length. [ 411.238816][T15585] netlink: 'syz.1.2612': attribute type 4 has an invalid length. [ 411.268010][T15583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2611'. [ 411.792220][T15615] bridge5: entered promiscuous mode [ 411.839706][T15615] bridge5: entered allmulticast mode [ 414.327881][T15612] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 414.358174][T15656] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 414.378838][T15656] batman_adv: batadv0: Adding interface: netdevsim0 [ 414.400556][T15656] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.444837][T15656] batman_adv: batadv0: Interface activated: netdevsim0 [ 414.551778][T15670] netlink: 'syz.1.2627': attribute type 1 has an invalid length. [ 414.649926][T15679] __nla_validate_parse: 7 callbacks suppressed [ 414.649944][T15679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2631'. [ 414.714310][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2631'. [ 414.742405][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2631'. [ 414.778780][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'. [ 414.793361][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2631'. [ 414.803266][T15685] netlink: 'syz.0.2634': attribute type 12 has an invalid length. [ 414.811783][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2631'. [ 414.825621][T15685] netlink: 'syz.0.2634': attribute type 11 has an invalid length. [ 414.871515][T15693] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 415.120289][T15703] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 415.154625][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 415.285320][T15716] tipc: Enabling of bearer rejected, failed to enable media [ 415.368702][T15721] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 415.385423][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 415.433811][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 415.450613][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 415.612398][T15733] syzkaller0: entered promiscuous mode [ 415.623243][T15733] syzkaller0: entered allmulticast mode [ 416.407551][T15777] SET target dimension over the limit! [ 416.734891][T15805] pimreg: entered allmulticast mode [ 416.894474][T15811] xt_addrtype: ipv6 does not support BROADCAST matching [ 416.957849][T15818] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 416.959176][T10888] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 417.122566][T15818] bond7: option mode: invalid value (9) [ 417.144241][T15818] bond7 (unregistering): Released all slaves [ 417.195358][T15808] tc_dump_action: action bad kind [ 418.196017][T15878] debugfs: 'netdev@ffff888031cf8700' already exists in 'ref_tracker' [ 418.647994][T15901] netlink: 'syz.3.2694': attribute type 10 has an invalid length. [ 418.804766][T15910] smc: net device tunl0 applied user defined pnetid SYZ2 [ 418.886330][T15913] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 418.942973][T15913] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.141211][T15926] lo speed is unknown, defaulting to 1000 [ 419.583680][T15962] netlink: 'syz.3.2712': attribute type 1 has an invalid length. [ 419.631562][T15963] bridge5: entered promiscuous mode [ 419.636999][T15963] bridge5: entered allmulticast mode [ 419.875391][T15975] __nla_validate_parse: 25 callbacks suppressed [ 419.875415][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 419.893510][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 420.015610][T15983] x_tables: ip_tables: TRACE target: only valid in raw table, not bridge0 [ 420.268331][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2719'. [ 420.299000][T16000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2720'. [ 420.511882][T16006] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2723'. [ 420.547954][T16008] netlink: 'syz.2.2724': attribute type 8 has an invalid length. [ 420.573272][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'. [ 420.686135][T16008] 8021q: adding VLAN 0 to HW filter on device bond11 [ 420.716747][T16008] bond11: entered allmulticast mode [ 420.733257][T16024] nbd: must specify a size in bytes for the device [ 420.738373][T16008] bond0: (slave bond11): Enslaving as an active interface with an up link [ 421.032084][T16040] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2734'. [ 421.133315][T16035] netlink: 'syz.3.2734': attribute type 32 has an invalid length. [ 421.148412][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 421.389680][T16036] geneve3: entered promiscuous mode [ 421.396519][T16036] geneve3: entered allmulticast mode [ 421.680173][T16035] bond9: option coupled_control: invalid value (192) [ 421.693379][T16035] bond9 (unregistering): Released all slaves [ 421.728823][ T77] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 256 - 0 [ 421.738026][ T77] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.747541][ T77] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 19999 - 0 [ 421.767641][ T77] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 421.790178][ T77] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.800098][ T77] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 421.827745][T16078] vlan3: entered allmulticast mode [ 421.844169][T16078] bond0: entered allmulticast mode [ 421.861766][T16078] bond_slave_0: entered allmulticast mode [ 421.875848][T16078] bond_slave_1: entered allmulticast mode [ 421.890903][ T77] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 421.912513][T16086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2742'. [ 421.928511][ T77] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.955707][ T77] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 421.995864][ T77] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 422.020218][ T77] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.043954][ T77] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 422.056791][T16088] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.2741'. [ 422.261143][T16107] sit0: entered promiscuous mode [ 422.292047][T16107] netlink: 'syz.0.2745': attribute type 1 has an invalid length. [ 422.388156][T16112] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 422.862589][ T30] audit: type=1107 audit(1783357388.882:4): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Sd5×MY­ä^ð€X‹ˆ”ùd9}«¸4ùÛŽ1Èʹad-óÌÈ&ô.ÑB;árnøâd;€Ê@áA²kÚ<î×oœÛª9¼6‘&Û›€£.íÞ‘wÆ~-çÉ æÎ~«¬,¥ÒQ›õª²X·ð<Ò<ƒ cV0u)Õò -„±ãµü‹LÀÍ‚èþ®‘=Äô’ïkŠ÷ôŸ#ß™aDÍJò­ï=ÝH¦Ðä»D‘ºqu…^j¨g*ÁÇ* ö×?¹P•ët#}!¯:š>=ÀGoA/V8_t õg_yýQaÿ¡r†¼õ^' [ 423.096643][T16150] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 423.253855][T16155] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 423.288032][T16161] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 423.312865][T16155] bond9: entered promiscuous mode [ 423.340502][T16155] 8021q: adding VLAN 0 to HW filter on device bond9 [ 423.480572][T16158] netlink: 'syz.3.2765': attribute type 1 has an invalid length. [ 423.594993][T16163] macvlan0: entered promiscuous mode [ 423.607402][T16163] macvlan0: entered allmulticast mode [ 423.615123][T16163] bond9: entered promiscuous mode [ 423.622360][T16163] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 423.650657][T16163] bond9: left promiscuous mode [ 423.913453][T16194] syzkaller0: entered promiscuous mode [ 423.919590][T16194] syzkaller0: entered allmulticast mode [ 423.933781][T16192] netlink: 'syz.1.2773': attribute type 178 has an invalid length. [ 424.387631][T16217] netlink: 'syz.2.2783': attribute type 5 has an invalid length. [ 424.409993][T16217] netlink: 'syz.2.2783': attribute type 3 has an invalid length. [ 424.777067][T16229] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 424.867946][T16240] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 424.885514][T16240] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 424.897074][T16236] __nla_validate_parse: 15 callbacks suppressed [ 424.897095][T16236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2790'. [ 424.915476][T16236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2790'. [ 424.944692][T16243] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 424.948000][T16242] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 425.094214][T16229] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 425.291784][T16229] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 425.616701][T16278] gre2: entered promiscuous mode [ 425.947759][T16301] netlink: 'syz.0.2808': attribute type 23 has an invalid length. [ 425.973729][ T7040] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 426.066366][T16302] ip6gre1: entered promiscuous mode [ 426.087512][T16302] ip6gre1: entered allmulticast mode [ 426.125674][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2810'. [ 426.140365][T16308] veth0_to_batadv: mtu less than device minimum [ 426.153413][T16302] bond0: left allmulticast mode [ 426.173562][T16302] bond_slave_0: left allmulticast mode [ 426.179724][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2810'. [ 426.193471][T16302] team0: left allmulticast mode [ 426.207678][T16302] team_slave_0: left allmulticast mode [ 426.233362][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2810'. [ 426.235420][T16302] team_slave_1: left allmulticast mode [ 426.274883][T16313] netlink: 'syz.3.2810': attribute type 7 has an invalid length. [ 426.276533][T16302] bond8: left allmulticast mode [ 426.296228][T16313] netlink: 'syz.3.2810': attribute type 8 has an invalid length. [ 426.306751][T16302] bond11: left allmulticast mode [ 426.316825][T16323] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 426.326450][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2810'. [ 426.334780][T16302] netdevsim netdevsim2 : left promiscuous mode [ 426.337039][T16323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2813'. [ 426.356853][T16302] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 426.367851][T16302] bond2: left allmulticast mode [ 426.376099][T16302] sit1: left promiscuous mode [ 426.381475][T16302] sit1: left allmulticast mode [ 426.386744][T16302] veth7: left allmulticast mode [ 426.394322][T16302] ip6tnl2: left allmulticast mode [ 426.400492][T16302] vlan2: left allmulticast mode [ 426.405431][T16302] erspan0: left allmulticast mode [ 426.413374][T16302] bond6: left promiscuous mode [ 426.418321][T16302] bridge1: left promiscuous mode [ 426.424327][T16302] macvtap1: left allmulticast mode [ 426.430061][T16302] macvtap2: left allmulticast mode [ 426.436455][T16302] gre1: left promiscuous mode [ 426.441974][T16302] gre1: left allmulticast mode [ 426.447345][T16302] geneve2: left allmulticast mode [ 426.454413][T16302] geneve3: left promiscuous mode [ 426.460488][T16302] geneve3: left allmulticast mode [ 426.483439][T16302] ip6gre1: left promiscuous mode [ 426.488473][T16302] ip6gre1: left allmulticast mode [ 426.544070][T16317] xfrm0: entered promiscuous mode [ 426.549937][T16317] xfrm0: entered allmulticast mode [ 426.565945][ T7033] netdevsim netdevsim2 : unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.600980][ T7033] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.634861][ T7033] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.697475][ T7033] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.718891][ T7033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 426.767773][ T7033] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 426.801406][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 426.875875][T16351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2819'. [ 426.890454][ T7033] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 426.890478][T16341] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2817'. [ 427.123690][T16370] netlink: 'syz.0.2819': attribute type 3 has an invalid length. [ 427.720294][T16393] 8021q: VLANs not supported on ip6_vti0 [ 427.784075][T16400] openvswitch: netlink: IPv4 tunnel dst address is zero [ 428.893971][T16464] netlink: 'syz.2.2842': attribute type 11 has an invalid length. [ 429.252102][T16478] syzkaller0: entered promiscuous mode [ 429.259607][T16478] syzkaller0: entered allmulticast mode [ 429.305418][T16489] netdevsim netdevsim0 : renamed from netdevsim0 [ 433.601342][T16605] netlink: 'syz.4.2867': attribute type 1 has an invalid length. [ 433.642820][T16605] __nla_validate_parse: 14 callbacks suppressed [ 433.642839][T16605] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2867'. [ 434.148996][T16637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.366462][T16653] xt_cgroup: path and classid specified [ 434.395933][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 434.497905][T16645] netlink: 'syz.4.2874': attribute type 16 has an invalid length. [ 435.462218][T16720] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2893'. [ 435.814067][T16745] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2900'. [ 435.857402][T16748] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 435.886906][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2902'. [ 435.923992][T16748] netlink: 'syz.3.2902': attribute type 21 has an invalid length. [ 435.955283][T16748] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2902'. [ 436.938893][T16816] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2919'. [ 437.497061][ T4939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 437.518128][ T4939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 437.530299][ T4939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 437.543192][ T4939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.552565][ T4939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.615851][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 437.628109][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 437.638455][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 437.648029][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.659925][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.966576][T16857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2931'. [ 438.212185][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 438.523885][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 438.675546][T16900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2940'. [ 438.678611][T16841] lo speed is unknown, defaulting to 1000 [ 438.791385][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 438.801429][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 438.929789][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2943'. [ 438.949813][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2943'. [ 439.375633][T16930] syzkaller0: entered promiscuous mode [ 439.381841][T16930] syzkaller0: entered allmulticast mode [ 439.408480][T16940] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2953'. [ 439.448134][T16940] vlan3: entered allmulticast mode [ 439.464193][T16940] ip6gretap0: entered allmulticast mode [ 439.561302][T16949] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2954'. [ 439.571917][T16949] veth0_to_bond: default FDB implementation only supports local addresses [ 439.741299][T16841] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.748815][T16841] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.756128][ T5637] Bluetooth: hci5: command tx timeout [ 439.765743][T16841] bridge_slave_0: entered allmulticast mode [ 439.775897][T16841] bridge_slave_0: entered promiscuous mode [ 439.785943][T16841] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.793547][T16841] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.801309][T16841] bridge_slave_1: entered allmulticast mode [ 439.808505][T16841] bridge_slave_1: entered promiscuous mode [ 439.850986][T16841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.867561][T16841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.926201][T16841] team0: Port device team_slave_0 added [ 439.936083][T16841] team0: Port device team_slave_1 added [ 439.984105][T16841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.991415][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.020307][T16841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.034597][T16841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.041991][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.068331][T16841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.087477][T16971] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2957'. [ 440.096961][T16971] xt_policy: neither incoming nor outgoing policy selected [ 440.140728][T16841] hsr_slave_0: entered promiscuous mode [ 440.147298][T16841] hsr_slave_1: entered promiscuous mode [ 440.154017][T16841] debugfs: 'hsr0' already exists in 'hsr' [ 440.159971][T16841] Cannot create hsr debugfs directory [ 440.505721][T16841] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.518707][T16841] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.570086][T16983] netlink: 'syz.2.2963': attribute type 1 has an invalid length. [ 440.580321][T16983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2963'. [ 440.618619][T16841] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.629568][T16841] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.738169][T16841] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.749072][T16841] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.812730][T16841] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 440.872172][T16841] batman_adv: batadv0: Removing interface: netdevsim0 [ 440.882832][T16841] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.893382][T16841] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.830101][ T5637] Bluetooth: hci5: command tx timeout [ 442.651461][T16953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.676641][T16841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.773131][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.818224][T16841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.864951][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.887474][T16841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.913568][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 442.917471][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.951498][T16841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.973425][T16841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.000415][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 443.017492][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 443.032231][T16996] netlink: 'syz.2.2966': attribute type 3 has an invalid length. [ 443.271287][T16841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.321362][T16841] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.352507][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.359770][ T7040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.403323][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.410761][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.543455][T17041] xt_NFQUEUE: number of total queues is 0 [ 443.910651][ T5637] Bluetooth: hci5: command tx timeout [ 444.101633][T17059] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 444.156821][T17059] bond10 (unregistering): Released all slaves [ 444.243760][T17075] netlink: 'syz.1.2980': attribute type 1 has an invalid length. [ 444.256396][T17072] xfrm0: entered allmulticast mode [ 444.374246][T17080] __nla_validate_parse: 1 callbacks suppressed [ 444.374263][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2981'. [ 444.415623][T17081] openvswitch: netlink: Missing key (keys=40, expected=100) [ 445.105668][T16841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.384219][T17136] pimreg3: entered allmulticast mode [ 445.753422][T16841] veth0_vlan: entered promiscuous mode [ 445.864062][T16841] veth1_vlan: entered promiscuous mode [ 445.989318][ T5637] Bluetooth: hci5: command tx timeout [ 445.994996][T17168] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2997'. [ 446.007855][T16841] veth0_macvtap: entered promiscuous mode [ 446.023614][T16841] veth1_macvtap: entered promiscuous mode [ 446.056295][T16841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.092387][T16841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.126020][ T7036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.165909][ T7036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.207927][ T7036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.244265][ T7036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.274276][T17178] netlink: 'syz.2.3001': attribute type 10 has an invalid length. [ 446.370258][T17178] team0: Port device dummy0 added [ 446.388325][T17182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3002'. [ 446.429321][T17182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3002'. [ 446.592996][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.644365][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.770180][T17205] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3007'. [ 446.781299][T17205] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3007'. [ 446.807863][T10888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.830633][T10888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.854014][T17213] netlink: 'syz.2.3008': attribute type 29 has an invalid length. [ 447.028695][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3009'. [ 447.048519][T17226] netlink: 'syz.3.3009': attribute type 10 has an invalid length. [ 447.122675][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3009'. [ 447.205782][T17226] geneve4: entered promiscuous mode [ 447.238535][T17226] geneve4: entered allmulticast mode [ 447.717133][ T4939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.732207][ T4939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.741869][ T4939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.775195][ T4939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.783210][ T4939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 447.976676][T17263] bridge_slave_1: left allmulticast mode [ 447.987916][T17263] bridge_slave_1: left promiscuous mode [ 447.995433][T17263] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.014487][T17263] bridge_slave_0: left allmulticast mode [ 448.043162][T17263] bridge_slave_0: left promiscuous mode [ 448.060358][T17263] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.283407][ T7036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.297135][ T7036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.404919][ T7036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.415554][ T7036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.444876][T17255] lo speed is unknown, defaulting to 1000 [ 448.503106][ T7036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.513696][ T7036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.595133][ T7036] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.605218][ T7036] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.817254][T17255] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.824977][T17255] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.833325][T17255] bridge_slave_0: entered allmulticast mode [ 448.841250][T17255] bridge_slave_0: entered promiscuous mode [ 448.867572][T17255] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.875217][T17255] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.882938][T17255] bridge_slave_1: entered allmulticast mode [ 448.890479][T17255] bridge_slave_1: entered promiscuous mode [ 448.912648][ T7036] bridge_slave_1: left allmulticast mode [ 448.920792][ T7036] bridge_slave_1: left promiscuous mode [ 448.928779][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.941113][ T7036] bridge_slave_0: left allmulticast mode [ 448.946894][ T7036] bridge_slave_0: left promiscuous mode [ 448.953792][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.977853][ T7036] pimreg: left allmulticast mode [ 448.983948][ T7036] dvmrp8: left allmulticast mode [ 449.203193][ T7036] team0: Port device geneve1 removed [ 449.244785][ T7036] bond2 (unregistering): (slave bridge1): Releasing active interface [ 449.282291][ T7036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.297635][ T7036] bond0 (unregistering): (slave team0): Releasing backup interface [ 449.307647][ T7036] bond0 (unregistering): Released all slaves [ 449.318578][ T7036] bond1 (unregistering): Released all slaves [ 449.347987][ T7036] bond2 (unregistering): Released all slaves [ 449.373409][ T7036] bond3 (unregistering): Released all slaves [ 449.386683][ T7036] bond4 (unregistering): Released all slaves [ 449.401243][ T7036] bond5 (unregistering): Released all slaves [ 449.416640][ T7036] bond6 (unregistering): Released all slaves [ 449.437847][ T7036] bond7 (unregistering): Released all slaves [ 449.454473][ T7036] bond8 (unregistering): Released all slaves [ 449.470518][ T7036] bond9 (unregistering): Released all slaves [ 449.497231][T17255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.511300][T17255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.574803][T17255] team0: Port device team_slave_0 added [ 449.595498][T17255] team0: Port device team_slave_1 added [ 449.647527][T17255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.655631][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.684194][T17255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.698683][T17255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.706295][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.733249][T17255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.744460][ T7036] tipc: Disabling bearer [ 449.776705][ T7036] tipc: Left network mode [ 449.854406][ T5637] Bluetooth: hci1: command tx timeout [ 449.886152][T17255] hsr_slave_0: entered promiscuous mode [ 449.893430][T17255] hsr_slave_1: entered promiscuous mode [ 449.896971][T17216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.901141][T17255] debugfs: 'hsr0' already exists in 'hsr' [ 449.918327][T17255] Cannot create hsr debugfs directory [ 450.324259][T17296] ip6gre1: entered allmulticast mode [ 450.364523][T17298] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3023'. [ 450.561990][T17302] netlink: 'syz.2.3023': attribute type 3 has an invalid length. [ 450.591809][T17318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3028'. [ 451.052078][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'. [ 451.094597][ T7036] hsr_slave_0: left promiscuous mode [ 451.113477][ T7036] hsr_slave_1: left promiscuous mode [ 451.243558][T17342] SET target dimension over the limit! [ 451.348620][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 451.603976][ T7036] team0 (unregistering): Port device team_slave_1 removed [ 451.620296][ T7036] team0 (unregistering): Port device team_slave_0 removed [ 451.747802][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.768766][T17356] bridge: RTM_NEWNEIGH with invalid ether address [ 451.888066][T17363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3041'. [ 451.911756][ T5637] Bluetooth: hci1: command tx timeout [ 451.974962][T17368] netlink: 'syz.4.3042': attribute type 1 has an invalid length. [ 451.983599][T17368] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3042'. [ 452.019650][T17366] bond0: entered promiscuous mode [ 452.037854][T17366] bond_slave_0: entered promiscuous mode [ 452.051324][T17366] team0: entered promiscuous mode [ 452.082533][T17366] team_slave_0: entered promiscuous mode [ 452.109434][T17366] team_slave_1: entered promiscuous mode [ 452.136115][T17366] dummy0: entered promiscuous mode [ 452.155036][T17374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3044'. [ 452.187290][T17366] bond8: entered promiscuous mode [ 452.206782][T17366] bond11: entered promiscuous mode [ 452.238830][T17366] batadv0: entered promiscuous mode [ 452.248766][T17366] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 452.273382][T17366] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 452.287068][T17366] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 452.340586][T17366] bond0: left promiscuous mode [ 452.355581][T17366] bond_slave_0: left promiscuous mode [ 452.381051][T17366] team0: left promiscuous mode [ 452.386319][T17366] team_slave_0: left promiscuous mode [ 452.400127][T17366] team_slave_1: left promiscuous mode [ 452.407372][T17366] dummy0: left promiscuous mode [ 452.420117][T17366] bond8: left promiscuous mode [ 452.436578][T17366] bond11: left promiscuous mode [ 452.464576][T17387] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 452.492244][T17366] batadv0: left promiscuous mode [ 452.973776][T17412] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 453.154298][T17424] x_tables: duplicate underflow at hook 3 [ 453.264879][T17429] netlink: 'syz.3.3058': attribute type 2 has an invalid length. [ 453.396221][T17429] : entered promiscuous mode [ 453.461391][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 453.493344][T17437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3061'. [ 453.624563][T17442] syzkaller0: entered promiscuous mode [ 453.646442][T17442] syzkaller0: entered allmulticast mode [ 453.907407][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3066'. [ 453.952789][T17451] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 454.003730][ T5637] Bluetooth: hci1: command tx timeout [ 454.127480][T17255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.157472][T17255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.217337][T17255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.272219][T17255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.307217][T17255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.318691][T17473] openvswitch: netlink: IP tunnel TTL not specified. [ 454.343681][T17473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.353589][T17255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.433124][T17476] geneve3: entered promiscuous mode [ 454.517389][T17255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.555639][T17255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.792167][T17507] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 454.986378][T17512] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 455.052340][T17255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.148791][T17255] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.204059][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.211451][ T7040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.266048][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.273309][T10888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.348832][T17523] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 456.014077][T17566] __nla_validate_parse: 7 callbacks suppressed [ 456.014095][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3090'. [ 456.070972][ T5637] Bluetooth: hci1: command tx timeout [ 456.125739][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3090'. [ 456.209823][T17575] sctp: [Deprecated]: syz.2.3092 (pid 17575) Use of int in max_burst socket option. [ 456.209823][T17575] Use struct sctp_assoc_value instead [ 456.637706][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3096'. [ 456.690496][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3096'. [ 456.955693][T17255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.045306][T17619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3099'. [ 457.063389][T17255] veth0_vlan: entered promiscuous mode [ 457.081568][T17255] veth1_vlan: entered promiscuous mode [ 457.134046][T17255] veth0_macvtap: entered promiscuous mode [ 457.148979][T17255] veth1_macvtap: entered promiscuous mode [ 457.205657][T17255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.273812][T17255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.313581][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.336055][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.368418][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.425562][ T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.762935][T17645] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3105'. [ 457.793068][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.824163][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.866388][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3106'. [ 457.928343][T17649] macsec1: entered promiscuous mode [ 457.933935][T17649] bridge0: entered promiscuous mode [ 457.939940][T17649] macsec1: entered allmulticast mode [ 457.945285][T17649] bridge0: entered allmulticast mode [ 457.957291][T17649] bridge0: port 3(macsec1) entered blocking state [ 457.971772][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3107'. [ 457.981808][T17649] bridge0: port 3(macsec1) entered disabled state [ 457.995469][T17649] bridge0: left allmulticast mode [ 458.012837][T16048] bridge0: left promiscuous mode [ 458.066078][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.092208][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.307642][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 458.329988][T17671] netlink: 'syz.0.3015': attribute type 3 has an invalid length. [ 458.342373][T17671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3015'. [ 458.360517][T17671] openvswitch: netlink: Multiple metadata blocks provided [ 458.374442][T17671] openvswitch: netlink: Multiple metadata blocks provided [ 458.858330][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 458.871753][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 458.887982][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 458.898740][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 458.912100][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.658992][T17715] openvswitch: netlink: IP tunnel dst address not specified [ 459.744506][ T77] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 459.773736][T17725] netlink: 'syz.2.3123': attribute type 10 has an invalid length. [ 459.862248][T17723] tipc: Started in network mode [ 459.883160][T17723] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 459.923608][T17723] tipc: Enabled bearer , priority 10 [ 459.955487][T17725] veth0_to_bond: left allmulticast mode [ 459.970127][T17725] veth0_to_bond: left promiscuous mode [ 459.983971][T17725] bridge4: port 2(veth0_to_bond) entered disabled state [ 460.050977][T17725] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 460.131993][ T77] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 460.215836][T17747] ¾x9ÿ: left allmulticast mode [ 460.238090][T17747] ¾x9ÿ: left promiscuous mode [ 460.250174][T17747] bridge0: port 1(1¾x9ÿ) entered disabled state [ 460.285451][T17747] bridge_slave_1: left allmulticast mode [ 460.305951][T17747] bridge_slave_1: left promiscuous mode [ 460.315120][T17747] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.334705][T17747] bond0: (slave bond_slave_0): Releasing backup interface [ 460.347451][T17747] bond0: (slave bond_slave_1): Releasing backup interface [ 460.353393][T17759] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 460.378723][T17747] team0: Port device team_slave_0 removed [ 460.392826][ T4939] Bluetooth: hci1: command 0x0405 tx timeout [ 460.404440][T17747] team0: Port device team_slave_1 removed [ 460.428742][T17747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.440156][T17747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.466896][T17747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.486277][T17747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.497663][T17747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 460.532554][T17770] Cannot find del_set index 4 as target [ 460.588940][ T77] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 460.765894][ T77] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 460.782492][T17780] netlink: 'syz.4.3135': attribute type 8 has an invalid length. [ 460.793472][T17688] lo speed is unknown, defaulting to 1000 [ 460.949629][ T4939] Bluetooth: hci2: command tx timeout [ 461.053305][T16065] tipc: Node number set to 4269801492 [ 461.155511][T17804] __nla_validate_parse: 3 callbacks suppressed [ 461.155530][T17804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3140'. [ 461.212502][T17796] can: request_module (can-proto-4) failed. [ 461.508487][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3142'. [ 461.561863][ T77] bridge_slave_1: left promiscuous mode [ 461.573565][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.595075][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.681800][ T77] pim6reg: left allmulticast mode [ 461.705661][ T77] pimreg3: left allmulticast mode [ 462.267008][ T77] bond5 (unregistering): (slave gretap1): Releasing active interface [ 462.286025][T17834] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3145'. [ 462.383257][ T77] bond4 (unregistering): (slave geneve2): Releasing active interface [ 462.564051][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.581168][ T77] bond_slave_0: left allmulticast mode [ 462.594959][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.604973][ T77] bond_slave_1: left allmulticast mode [ 462.612146][ T77] bond0 (unregistering): Released all slaves [ 462.626293][ T77] bond1 (unregistering): Released all slaves [ 462.649488][ T77] bond2 (unregistering): Released all slaves [ 462.683830][ T77] bond3 (unregistering): Released all slaves [ 462.704580][ T77] bond4 (unregistering): Released all slaves [ 462.731496][ T77] bond5 (unregistering): Released all slaves [ 462.753264][ T77] bond6 (unregistering): Released all slaves [ 462.781631][ T77] bond7 (unregistering): Released all slaves [ 462.945656][ T77] : left promiscuous mode [ 463.030133][ T4939] Bluetooth: hci2: command tx timeout [ 463.065749][ T77] tipc: Disabling bearer [ 463.090165][ T77] tipc: Left network mode [ 463.312376][T17688] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.319981][T17688] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.331799][T17688] bridge_slave_0: entered allmulticast mode [ 463.357314][T17688] bridge_slave_0: entered promiscuous mode [ 463.384137][T17688] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.398715][T17688] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.407308][T17688] bridge_slave_1: entered allmulticast mode [ 463.423270][T17688] bridge_slave_1: entered promiscuous mode [ 463.516042][T17688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.560475][T17688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.625802][T17688] team0: Port device team_slave_0 added [ 463.636753][T17688] team0: Port device team_slave_1 added [ 463.721921][T17688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.729342][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.760870][T17688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.773926][T17688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.781222][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.807678][T17688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.895932][T17688] hsr_slave_0: entered promiscuous mode [ 463.902704][T17688] hsr_slave_1: entered promiscuous mode [ 463.908932][T17688] debugfs: 'hsr0' already exists in 'hsr' [ 463.918953][T17688] Cannot create hsr debugfs directory [ 464.038529][T17796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.104380][ T77] hsr_slave_0: left promiscuous mode [ 464.138758][ T77] hsr_slave_1: left promiscuous mode [ 464.145420][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.155075][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.167594][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.184703][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.739573][T17860] 8021q: VLANs not supported on vcan0 [ 465.109922][ T4939] Bluetooth: hci2: command tx timeout [ 465.299017][T17889] netlink: 'syz.0.3156': attribute type 10 has an invalid length. [ 465.348483][T17886] netlink: 'syz.4.3155': attribute type 5 has an invalid length. [ 465.406755][T17889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.414642][T17889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.451249][T17889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.470820][T17889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.693848][ T77] IPVS: stop unused estimator thread 0... [ 465.855732][T17908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3160'. [ 466.056924][T17915] syzkaller0: entered promiscuous mode [ 466.099541][T17915] syzkaller0: entered allmulticast mode [ 466.142808][T17922] Cannot find del_set index 0 as target [ 466.351627][T17932] netlink: 'syz.2.3165': attribute type 4 has an invalid length. [ 466.546776][T17939] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 466.807069][T17688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.875608][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.929428][T17688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.958937][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.026784][T17688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 467.074563][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.096693][T17688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.127137][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.201633][ T4939] Bluetooth: hci2: command tx timeout [ 467.406399][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3170'. [ 467.609623][T17998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3179'. [ 467.635940][T17688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.652790][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3179'. [ 467.698109][T18005] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3181'. [ 467.701104][T17688] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.778226][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.785519][ T7040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.832945][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.840174][ T7040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.170889][T18026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3186'. [ 468.333755][T18040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3189'. [ 468.418497][T18045] openvswitch: netlink: Message has 4 unknown bytes. [ 468.427427][T18045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.527408][T18049] openvswitch: netlink: Message has 4 unknown bytes. [ 468.558212][T18049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.721780][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 468.725025][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 468.758769][T18064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3195'. [ 468.780031][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.788056][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.791943][T18067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3195'. [ 468.795220][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.809231][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.815351][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.821485][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.827577][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.833735][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.839854][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.845931][T18063] tc action pedit 'at' offset 5 out of bounds [ 468.852072][T18063] 0: reclassify loop, rule prio 0, protocol 800 [ 469.037158][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.216141][T18092] netlink: 'syz.3.3199': attribute type 15 has an invalid length. [ 469.231398][T17688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.252793][T18092] netlink: 'syz.3.3199': attribute type 15 has an invalid length. [ 469.322329][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.333201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.376375][T18099] syzkaller0: entered promiscuous mode [ 469.402094][T18099] syzkaller0: entered allmulticast mode [ 469.442349][T17688] veth0_vlan: entered promiscuous mode [ 469.563975][T17688] veth1_vlan: entered promiscuous mode [ 469.678906][T17688] veth0_macvtap: entered promiscuous mode [ 469.710035][T17688] veth1_macvtap: entered promiscuous mode [ 469.858645][T17688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.887807][T17688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.938233][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.960981][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.982935][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.016283][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.072549][T16052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.220878][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.242460][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.364890][ T7038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.379763][ T7038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.791276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.111455][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 471.126075][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 471.135559][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 471.144705][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 471.152857][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 471.347845][T18181] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.355017][T18181] bridge0: port 1(bridge_slave_0) entered listening state [ 471.700261][T18181] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 471.787679][T18181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.969467][T16052] lo speed is unknown, defaulting to 1000 [ 471.995021][T16052] syz2: Port: 1 Link ACTIVE [ 472.030747][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.037939][ T7038] bridge0: port 2(bridge_slave_1) entered listening state [ 472.098624][ T7036] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 472.126316][ T7036] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 472.154728][ T7036] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 472.182528][ T7036] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 472.200427][T18201] Cannot find set identified by id 65535 to match [ 472.368664][T18208] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 472.558350][T18182] lo speed is unknown, defaulting to 1000 [ 472.618732][T18219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.689964][T18222] __nla_validate_parse: 9 callbacks suppressed [ 472.689983][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3232'. [ 472.923458][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3234'. [ 472.946306][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3234'. [ 473.034579][T18234] erspan0: entered promiscuous mode [ 473.043362][T18234] gretap0: entered promiscuous mode [ 473.148438][T18239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3236'. [ 473.191340][ T5637] Bluetooth: hci3: command tx timeout [ 473.224923][ T48] veth9: left allmulticast mode [ 473.230735][ T48] veth9: left promiscuous mode [ 473.235808][ T48] bridge4: port 1(veth9) entered disabled state [ 473.258142][ T48] pimreg: left allmulticast mode [ 473.334624][T18250] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 473.578988][ T48] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 473.617770][ T48] bond7 (unregistering): (slave bridge3): Releasing active interface [ 473.636410][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.648198][ T48] bond0 (unregistering): (slave team0): Releasing backup interface [ 473.662107][ T48] bond0 (unregistering): (slave bond8): Releasing backup interface [ 473.671792][ T48] bond0 (unregistering): (slave bond11): Releasing backup interface [ 473.681419][ T48] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 473.691914][ T48] bond0 (unregistering): Released all slaves [ 473.702201][ T48] bond1 (unregistering): Released all slaves [ 473.716241][ T48] bond2 (unregistering): Released all slaves [ 473.735107][ T48] bond3 (unregistering): Released all slaves [ 473.751221][ T48] bond4 (unregistering): Released all slaves [ 473.765859][ T48] bond5 (unregistering): Released all slaves [ 473.780112][ T48] bond6 (unregistering): Released all slaves [ 473.801738][ T48] bond7 (unregistering): Released all slaves [ 473.834558][ T48] bond8 (unregistering): Released all slaves [ 473.848932][ T48] bond9 (unregistering): Released all slaves [ 473.863656][ T48] bond10 (unregistering): Released all slaves [ 473.877743][ T48] bond11 (unregistering): Released all slaves [ 474.225589][ T48] tipc: Left network mode [ 474.232056][T16048] net_ratelimit: 11 callbacks suppressed [ 474.232071][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.331330][T16061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.480780][T18291] IPVS: length: 176 != 24 [ 474.488067][T18291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3245'. [ 474.499780][T18291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3245'. [ 474.650204][T18298] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3247'. [ 474.676811][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3247'. [ 474.737154][T18302] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3247'. [ 474.816268][T18182] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.849034][T18182] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.880974][T18182] bridge_slave_0: entered allmulticast mode [ 474.917200][T18182] bridge_slave_0: entered promiscuous mode [ 474.976185][T18182] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.006330][T18182] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.038394][T18182] bridge_slave_1: entered allmulticast mode [ 475.071010][T18182] bridge_slave_1: entered promiscuous mode [ 475.270331][ T5637] Bluetooth: hci3: command tx timeout [ 475.278684][T16051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.280489][T18313] bond1 (unregistering): Released all slaves [ 475.385347][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 475.418931][T18327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3254'. [ 475.464190][T18182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.500835][T18182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.526273][T18322] syzkaller0: entered promiscuous mode [ 475.538572][T18322] syzkaller0: entered allmulticast mode [ 475.598651][T18182] team0: Port device team_slave_0 added [ 475.621261][T18182] team0: Port device team_slave_1 added [ 475.634555][T18322] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 475.646342][T18322] gretap2: entered promiscuous mode [ 475.660355][T18322] gretap2: entered allmulticast mode [ 475.812794][T18182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.841323][T18182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.931469][T18182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.962275][T18182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.990731][T18182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.022764][T18182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.181050][ T48] hsr_slave_0: left promiscuous mode [ 476.197595][ T48] hsr_slave_1: left promiscuous mode [ 476.220880][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.311002][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.555586][ T48] team0 (unregistering): Port device team_slave_1 removed [ 476.575349][ T48] team0 (unregistering): Port device team_slave_0 removed [ 476.727029][ T48] team0 (unregistering): Port device dummy0 removed [ 476.807402][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 476.992431][T18182] hsr_slave_0: entered promiscuous mode [ 477.000213][T18182] hsr_slave_1: entered promiscuous mode [ 477.070440][T18386] syzkaller0: entered promiscuous mode [ 477.087941][T18386] syzkaller0: entered allmulticast mode [ 477.351521][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.359744][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.359778][ T5637] Bluetooth: hci3: command tx timeout [ 477.596312][ T48] IPVS: stop unused estimator thread 0... [ 477.991348][T18427] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 478.148207][T18427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.168141][T18432] bond1: (slave batadv0): Opening slave failed [ 478.390676][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.601424][T18456] netlink: 'syz.3.3279': attribute type 2 has an invalid length. [ 478.868321][T18472] netlink: 'syz.3.3282': attribute type 33 has an invalid length. [ 478.878209][T18472] IPVS: length: 239 != 8 [ 479.160432][T18484] netlink: 'syz.0.3284': attribute type 1 has an invalid length. [ 479.285412][T18182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 479.314813][T18182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.323596][T18182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 479.371964][T18182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.406966][T18182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 479.429350][ T5637] Bluetooth: hci3: command tx timeout [ 479.435301][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.448319][T18182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.481597][T18182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.498020][T18500] __nla_validate_parse: 4 callbacks suppressed [ 479.498037][T18500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3290'. [ 479.528978][T18182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.553953][T18505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3291'. [ 479.633728][T18511] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3293'. [ 479.647032][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3291'. [ 479.960584][T18182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.995304][T18532] tipc: Enabling of bearer rejected, failed to enable media [ 480.038464][T18537] netlink: 'syz.1.3298': attribute type 12 has an invalid length. [ 480.051072][T18182] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.078376][T18541] netlink: 'syz.3.3300': attribute type 10 has an invalid length. [ 480.100652][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.102427][T18541] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3300'. [ 480.107848][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.201605][T18541] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 480.237453][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.244855][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.390917][T16063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.472186][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.674119][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3305'. [ 481.062882][T18599] netlink: 'syz.3.3313': attribute type 4 has an invalid length. [ 481.474426][T18182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.506564][T18618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.533709][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.629381][T18620] syzkaller0: entered promiscuous mode [ 481.641874][T18620] syzkaller0: entered allmulticast mode [ 481.671294][T16063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.911095][T18635] netlink: 'syz.4.3318': attribute type 21 has an invalid length. [ 481.929018][T18182] veth0_vlan: entered promiscuous mode [ 481.938346][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3318'. [ 481.993982][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'. [ 482.041538][T18635] vlan2: entered allmulticast mode [ 482.067874][T18635] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 482.175620][T18182] veth1_vlan: entered promiscuous mode [ 482.241613][T18637] netlink: 'syz.4.3318': attribute type 1 has an invalid length. [ 482.303556][T18635] netlink: 'syz.4.3318': attribute type 1 has an invalid length. [ 482.409764][T18182] veth0_macvtap: entered promiscuous mode [ 482.485132][T18182] veth1_macvtap: entered promiscuous mode [ 482.551716][T16052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.591348][T18182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.628836][T18182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.698157][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.726350][ T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.755101][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.796250][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.942688][T18685] xt_hashlimit: size too large, truncated to 1048576 [ 483.041692][T18691] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.3327'. [ 483.106215][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 483.120761][T18691] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 483.144892][T18691] 0ªX¹¦Dö»: entered allmulticast mode [ 483.184704][T10888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.204013][T10888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.271205][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.288520][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.353822][T18704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.364054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.727352][T18719] nbd: must specify a size in bytes for the device [ 483.825972][ T4939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.842754][ T4939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.860678][ T4939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.871961][ T4939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.884095][ T4939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.052622][T18731] netlink: 'syz.2.3338': attribute type 11 has an invalid length. [ 484.433183][T18744] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 484.631150][T16054] net_ratelimit: 2 callbacks suppressed [ 484.631195][T16054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.745810][ T30] audit: type=1804 audit(1783357450.762:5): pid=18763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3345" name="/newroot/23/cgroup.controllers" dev="tmpfs" ino=138 res=1 errno=0 [ 484.801626][ T30] audit: type=1800 audit(1783357450.762:6): pid=18763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3345" name="cgroup.controllers" dev="tmpfs" ino=138 res=0 errno=0 [ 484.917000][T18724] lo speed is unknown, defaulting to 1000 [ 485.184260][ T48] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 485.228211][T18794] __nla_validate_parse: 9 callbacks suppressed [ 485.228231][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 485.451493][T18724] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.458784][T18724] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.466449][T18724] bridge_slave_0: entered allmulticast mode [ 485.474220][T18724] bridge_slave_0: entered promiscuous mode [ 485.482763][T18724] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.490204][T18724] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.497625][T18724] bridge_slave_1: entered allmulticast mode [ 485.505759][T18724] bridge_slave_1: entered promiscuous mode [ 485.564246][T18724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.605100][T18808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.612546][T18808] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 485.625456][T18808] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 485.646386][T18724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.670721][T16054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.683078][T18724] team0: Port device team_slave_0 added [ 485.691854][T18724] team0: Port device team_slave_1 added [ 485.726226][T18724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.733578][T18724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.763824][T18724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.781441][T18724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.788446][T18724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.815274][T18724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.827843][T18775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.983569][T18724] hsr_slave_0: entered promiscuous mode [ 486.001122][ T4939] Bluetooth: hci4: command tx timeout [ 486.015827][T18724] hsr_slave_1: entered promiscuous mode [ 486.027936][T18724] debugfs: 'hsr0' already exists in 'hsr' [ 486.035748][T18724] Cannot create hsr debugfs directory [ 486.068495][T18818] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3359'. [ 486.182332][T18818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3359'. [ 486.255327][T18825] bond1 (unregistering): Released all slaves [ 486.431588][T18832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 486.491505][T16061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.532009][T18724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.545529][T18724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 486.556654][T18724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.568400][T18724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 486.568620][T18836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3364'. [ 486.637683][T18833] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 486.647822][T18840] netlink: 'syz.0.3365': attribute type 1 has an invalid length. [ 486.670752][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3364'. [ 486.697501][T18840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.711451][T16054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.716436][T18835] macvlan2: entered promiscuous mode [ 486.725318][T18835] macvlan2: entered allmulticast mode [ 486.732648][T18835] bond2: entered promiscuous mode [ 486.738769][T18835] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 486.752129][T18835] bond2: left promiscuous mode [ 486.796323][T18724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.814880][T18724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 486.825289][T18724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.835871][T18724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 486.966419][T18724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.977152][T18724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 486.988836][T18724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.000929][T18724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 487.167031][T18849] block nbd1: reconnected socket [ 487.195001][ T4939] block nbd1: Receive control failed (result -104) [ 487.484628][T18724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.516890][T18724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 487.544082][T18724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.578064][T18724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 487.611595][T18724] [ 487.613971][T18724] ====================================================== [ 487.621080][T18724] WARNING: possible circular locking dependency detected [ 487.628126][T18724] syzkaller #0 Not tainted [ 487.632726][T18724] ------------------------------------------------------ [ 487.639752][T18724] syz-executor/18724 is trying to acquire lock: [ 487.646000][T18724] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 487.655987][T18724] [ 487.655987][T18724] but task is already holding lock: [ 487.663445][T18724] ffffffff8f5e34c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 487.672294][T18724] [ 487.672294][T18724] which lock already depends on the new lock. [ 487.672294][T18724] [ 487.682701][T18724] [ 487.682701][T18724] the existing dependency chain (in reverse order) is: [ 487.691725][T18724] [ 487.691725][T18724] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 487.698958][T18724] __mutex_lock+0x19d/0x1550 [ 487.704231][T18724] get_device_parent+0x16f/0x3a0 [ 487.709805][T18724] device_add+0x2d4/0xb80 [ 487.714720][T18724] device_create+0x269/0x300 [ 487.719942][T18724] msr_device_create+0x33/0x50 [ 487.725391][T18724] cpuhp_invoke_callback+0x434/0x810 [ 487.731256][T18724] cpuhp_thread_fun+0x362/0x780 [ 487.736649][T18724] smpboot_thread_fn+0x57c/0xa80 [ 487.742139][T18724] kthread+0x388/0x470 [ 487.746753][T18724] ret_from_fork+0x514/0xb70 [ 487.752038][T18724] ret_from_fork_asm+0x1a/0x30 [ 487.757378][T18724] [ 487.757378][T18724] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 487.764959][T18724] cpuhp_thread_fun+0x127/0x780 [ 487.770354][T18724] smpboot_thread_fn+0x57c/0xa80 [ 487.775846][T18724] kthread+0x388/0x470 [ 487.780457][T18724] ret_from_fork+0x514/0xb70 [ 487.785682][T18724] ret_from_fork_asm+0x1a/0x30 [ 487.790991][T18724] [ 487.790991][T18724] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 487.798832][T18724] cpus_read_lock+0x42/0x160 [ 487.803970][T18724] static_key_slow_inc+0x12/0x30 [ 487.809495][T18724] nbd_genl_reconfigure+0x1301/0x1e80 [ 487.815509][T18724] genl_family_rcv_msg_doit+0x233/0x340 [ 487.821795][T18724] genl_rcv_msg+0x614/0x7a0 [ 487.826855][T18724] netlink_rcv_skb+0x226/0x4a0 [ 487.832232][T18724] genl_rcv+0x28/0x40 [ 487.835524][T18889] netlink: 'syz.2.3382': attribute type 10 has an invalid length. [ 487.836751][T18724] netlink_unicast+0x7bb/0x940 [ 487.850192][T18724] netlink_sendmsg+0x813/0xb40 [ 487.855502][T18724] sock_sendmsg_nosec+0x13a/0x180 [ 487.861187][T18724] ____sys_sendmsg+0x54e/0x850 [ 487.866473][T18724] ___sys_sendmsg+0x2a5/0x360 [ 487.871680][T18724] __x64_sys_sendmsg+0x1b1/0x290 [ 487.877450][T18724] do_syscall_64+0x174/0x580 [ 487.882637][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.889069][T18724] [ 487.889069][T18724] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 487.896315][T18890] netlink: 'syz.2.3382': attribute type 10 has an invalid length. [ 487.896730][T18724] __mutex_lock+0x19d/0x1550 [ 487.909714][T18724] nbd_queue_rq+0x373/0x1150 [ 487.915020][T18724] blk_mq_dispatch_rq_list+0x499/0x1990 [ 487.921178][T18724] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 487.928121][T18724] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 487.934637][T18724] blk_mq_run_work_fn+0x16c/0x300 [ 487.940253][T18724] process_scheduled_works+0xa8e/0x14e0 [ 487.946319][T18724] worker_thread+0xa47/0xfb0 [ 487.951636][T18724] kthread+0x388/0x470 [ 487.956226][T18724] ret_from_fork+0x514/0xb70 [ 487.961344][T18724] ret_from_fork_asm+0x1a/0x30 [ 487.966618][T18724] [ 487.966618][T18724] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 487.973857][T18724] __mutex_lock+0x19d/0x1550 [ 487.978977][T18724] nbd_queue_rq+0xc1/0x1150 [ 487.984001][T18724] blk_mq_dispatch_rq_list+0x499/0x1990 [ 487.990064][T18724] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 487.996925][T18724] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 488.003563][T18724] blk_mq_run_work_fn+0x16c/0x300 [ 488.009107][T18724] process_scheduled_works+0xa8e/0x14e0 [ 488.015177][T18724] worker_thread+0xa47/0xfb0 [ 488.020306][T18724] kthread+0x388/0x470 [ 488.024908][T18724] ret_from_fork+0x514/0xb70 [ 488.030072][T18724] ret_from_fork_asm+0x1a/0x30 [ 488.035347][T18724] [ 488.035347][T18724] -> #5 (set->srcu){.+.+}-{0:0}: [ 488.042473][T18724] __synchronize_srcu+0xc9/0x2f0 [ 488.047963][T18724] elevator_switch+0x1e8/0x7b0 [ 488.053304][T18724] elevator_change+0x2fa/0x480 [ 488.058577][T18724] elevator_set_default+0x375/0x440 [ 488.064305][T18724] blk_register_queue+0x3f3/0x4e0 [ 488.069944][T18724] __add_disk+0x6cb/0xe30 [ 488.070057][ T4939] Bluetooth: hci4: command tx timeout [ 488.074810][T18724] add_disk_fwnode+0xfb/0x4b0 [ 488.074827][T18724] nbd_dev_add+0x733/0xb60 [ 488.090816][T18724] nbd_init+0x15f/0x1e0 [ 488.095683][T18724] do_one_initcall+0x250/0x870 [ 488.100987][T18724] do_initcall_level+0x10a/0x1a0 [ 488.106579][T18724] do_initcalls+0x59/0xa0 [ 488.111456][T18724] kernel_init_freeable+0x29d/0x3e0 [ 488.117172][T18724] kernel_init+0x1d/0x1d0 [ 488.122023][T18724] ret_from_fork+0x514/0xb70 [ 488.127123][T18724] ret_from_fork_asm+0x1a/0x30 [ 488.132401][T18724] [ 488.132401][T18724] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 488.140307][T18724] __mutex_lock+0x19d/0x1550 [ 488.145419][T18724] elevator_change+0x1af/0x480 [ 488.150837][T18724] elevator_set_none+0xb5/0x140 [ 488.156202][T18724] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 488.162556][T18724] nbd_start_device+0x189/0xb30 [ 488.167925][T18724] nbd_genl_connect+0x1597/0x1c10 [ 488.173466][T18724] genl_family_rcv_msg_doit+0x233/0x340 [ 488.179549][T18724] genl_rcv_msg+0x614/0x7a0 [ 488.184577][T18724] netlink_rcv_skb+0x226/0x4a0 [ 488.189859][T18724] genl_rcv+0x28/0x40 [ 488.194450][T18724] netlink_unicast+0x7bb/0x940 [ 488.199815][T18724] netlink_sendmsg+0x813/0xb40 [ 488.205093][T18724] sock_sendmsg_nosec+0x13a/0x180 [ 488.210633][T18724] ____sys_sendmsg+0x54e/0x850 [ 488.215922][T18724] ___sys_sendmsg+0x2a5/0x360 [ 488.221128][T18724] __x64_sys_sendmsg+0x1b1/0x290 [ 488.226583][T18724] do_syscall_64+0x174/0x580 [ 488.231690][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.238096][T18724] [ 488.238096][T18724] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 488.246684][T18724] blk_alloc_queue+0x544/0x690 [ 488.251983][T18724] __blk_mq_alloc_disk+0x194/0x390 [ 488.257614][T18724] nbd_dev_add+0x494/0xb60 [ 488.262543][T18724] nbd_init+0x15f/0x1e0 [ 488.267211][T18724] do_one_initcall+0x250/0x870 [ 488.272496][T18724] do_initcall_level+0x10a/0x1a0 [ 488.278122][T18724] do_initcalls+0x59/0xa0 [ 488.283237][T18724] kernel_init_freeable+0x29d/0x3e0 [ 488.288963][T18724] kernel_init+0x1d/0x1d0 [ 488.293802][T18724] ret_from_fork+0x514/0xb70 [ 488.298989][T18724] ret_from_fork_asm+0x1a/0x30 [ 488.304263][T18724] [ 488.304263][T18724] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 488.311458][T18724] fs_reclaim_acquire+0x71/0x100 [ 488.316942][T18724] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 488.323213][T18724] alloc_inode+0xb8/0x1b0 [ 488.328174][T18724] iget_locked+0x131/0x6a0 [ 488.333101][T18724] kernfs_get_inode+0x4f/0x770 [ 488.338395][T18724] kernfs_get_tree+0x5cd/0x980 [ 488.343891][T18724] vfs_get_tree+0x92/0x2a0 [ 488.348822][T18724] do_new_mount+0x319/0xdc0 [ 488.353923][T18724] __se_sys_mount+0x31d/0x420 [ 488.359122][T18724] do_syscall_64+0x174/0x580 [ 488.364228][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.370627][T18724] [ 488.370627][T18724] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 488.378599][T18724] down_write+0x96/0x200 [ 488.383353][T18724] kernfs_remove_by_name_ns+0x4e/0x140 [ 488.389332][T18724] device_links_driver_bound+0x4ab/0x1440 [ 488.395567][T18724] driver_bound+0xd8/0x2e0 [ 488.400496][T18724] really_probe+0x774/0xae0 [ 488.405502][T18724] __driver_probe_device+0x1e8/0x360 [ 488.411315][T18724] driver_probe_device+0x4f/0x240 [ 488.416849][T18724] __device_attach_driver+0x270/0x410 [ 488.422729][T18724] bus_for_each_drv+0x258/0x2f0 [ 488.428090][T18724] __device_attach+0x2c4/0x450 [ 488.433375][T18724] device_initial_probe+0xa1/0xd0 [ 488.438943][T18724] bus_probe_device+0x12a/0x220 [ 488.444312][T18724] device_add+0x7d7/0xb80 [ 488.449169][T18724] faux_device_create_with_groups+0x1a5/0x2b0 [ 488.455840][T18724] regulator_dummy_init+0x19/0x40 [ 488.461448][T18724] regulator_init+0xca/0x110 [ 488.466612][T18724] do_one_initcall+0x250/0x870 [ 488.471889][T18724] do_initcall_level+0x10a/0x1a0 [ 488.477355][T18724] do_initcalls+0x59/0xa0 [ 488.482197][T18724] kernel_init_freeable+0x29d/0x3e0 [ 488.487909][T18724] kernel_init+0x1d/0x1d0 [ 488.492768][T18724] ret_from_fork+0x514/0xb70 [ 488.498018][T18724] ret_from_fork_asm+0x1a/0x30 [ 488.503495][T18724] [ 488.503495][T18724] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 488.512111][T18724] __lock_acquire+0x1520/0x2cf0 [ 488.517508][T18724] lock_acquire+0x106/0x350 [ 488.522550][T18724] down_read+0x4a/0x330 [ 488.527931][T18724] kernfs_remove+0x35/0x80 [ 488.532864][T18724] __kobject_del+0xe0/0x310 [ 488.537986][T18724] kobject_del+0x45/0x60 [ 488.542769][T18724] cleanup_glue_dir+0x1a3/0x220 [ 488.548170][T18724] device_del+0x77d/0x8f0 [ 488.553064][T18724] unregister_netdevice_many_notify+0x1be4/0x2150 [ 488.560197][T18724] unregister_netdevice_queue+0x2f5/0x340 [ 488.566476][T18724] nsim_destroy+0x275/0x800 [ 488.571676][T18724] __nsim_dev_port_del+0x14e/0x200 [ 488.577482][T18724] nsim_dev_reload_destroy+0x288/0x490 [ 488.583548][T18724] nsim_drv_remove+0x58/0x170 [ 488.588752][T18724] device_release_driver_internal+0x48b/0x880 [ 488.595346][T18724] bus_remove_device+0x444/0x560 [ 488.600810][T18724] device_del+0x524/0x8f0 [ 488.605752][T18724] device_unregister+0x21/0xf0 [ 488.611041][T18724] del_device_store+0x2b5/0x370 [ 488.616517][T18724] kernfs_fop_write_iter+0x3a4/0x540 [ 488.622326][T18724] vfs_write+0x612/0xba0 [ 488.627175][T18724] ksys_write+0x150/0x270 [ 488.632055][T18724] do_syscall_64+0x174/0x580 [ 488.637181][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.643616][T18724] [ 488.643616][T18724] other info that might help us debug this: [ 488.643616][T18724] [ 488.653836][T18724] Chain exists of: [ 488.653836][T18724] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 488.653836][T18724] [ 488.667380][T18724] Possible unsafe locking scenario: [ 488.667380][T18724] [ 488.674831][T18724] CPU0 CPU1 [ 488.680188][T18724] ---- ---- [ 488.685533][T18724] lock(gdp_mutex); [ 488.689417][T18724] lock(cpuhp_state-up); [ 488.696340][T18724] lock(gdp_mutex); [ 488.702749][T18724] rlock(&root->kernfs_supers_rwsem); [ 488.708295][T18724] [ 488.708295][T18724] *** DEADLOCK *** [ 488.708295][T18724] [ 488.716437][T18724] 8 locks held by syz-executor/18724: [ 488.721898][T18724] #0: ffff888032a7e450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 488.730772][T18724] #1: ffff888057303880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 488.740499][T18724] #2: ffff88802aa88c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 488.750658][T18724] #3: ffffffff8f8a8620 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 488.760909][T18724] #4: ffff88807a2aa128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 488.771431][T18724] #5: ffff88807a2d5258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 488.781597][T18724] #6: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 488.790535][T18724] #7: ffffffff8f5e34c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 488.799742][T18724] [ 488.799742][T18724] stack backtrace: [ 488.805645][T18724] CPU: 0 UID: 0 PID: 18724 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 488.805659][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.805671][T18724] Call Trace: [ 488.805677][T18724] [ 488.805684][T18724] dump_stack_lvl+0xe8/0x150 [ 488.805704][T18724] print_circular_bug+0x2e1/0x300 [ 488.805716][T18724] check_noncircular+0x12e/0x150 [ 488.805733][T18724] __lock_acquire+0x1520/0x2cf0 [ 488.805753][T18724] ? kernfs_remove+0x35/0x80 [ 488.805772][T18724] lock_acquire+0x106/0x350 [ 488.805784][T18724] ? kernfs_remove+0x35/0x80 [ 488.805801][T18724] down_read+0x4a/0x330 [ 488.805816][T18724] ? kernfs_remove+0x35/0x80 [ 488.805830][T18724] kernfs_remove+0x35/0x80 [ 488.805844][T18724] __kobject_del+0xe0/0x310 [ 488.805861][T18724] kobject_del+0x45/0x60 [ 488.805875][T18724] cleanup_glue_dir+0x1a3/0x220 [ 488.805888][T18724] device_del+0x77d/0x8f0 [ 488.805898][T18724] ? __pfx_device_del+0x10/0x10 [ 488.805906][T18724] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 488.805986][T18724] ? netdev_unregister_kobject+0x347/0x450 [ 488.806038][T18724] unregister_netdevice_many_notify+0x1be4/0x2150 [ 488.806053][T18724] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 488.806064][T18724] ? __mutex_lock+0x30d/0x1550 [ 488.806081][T18724] unregister_netdevice_queue+0x2f5/0x340 [ 488.806098][T18724] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 488.806116][T18724] nsim_destroy+0x275/0x800 [ 488.806130][T18724] __nsim_dev_port_del+0x14e/0x200 [ 488.806144][T18724] nsim_dev_reload_destroy+0x288/0x490 [ 488.806160][T18724] nsim_drv_remove+0x58/0x170 [ 488.806173][T18724] ? __pfx_nsim_bus_remove+0x10/0x10 [ 488.806184][T18724] device_release_driver_internal+0x48b/0x880 [ 488.806197][T18724] bus_remove_device+0x444/0x560 [ 488.806212][T18724] ? __pfx_bus_remove_device+0x10/0x10 [ 488.806226][T18724] ? kernfs_remove_by_name_ns+0x101/0x140 [ 488.806242][T18724] device_del+0x524/0x8f0 [ 488.806250][T18724] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 488.806289][T18724] ? __pfx_device_del+0x10/0x10 [ 488.806299][T18724] ? sysfs_file_kobj+0x1a/0x230 [ 488.806310][T18724] device_unregister+0x21/0xf0 [ 488.806325][T18724] del_device_store+0x2b5/0x370 [ 488.806338][T18724] ? __pfx_del_device_store+0x10/0x10 [ 488.806350][T18724] ? sysfs_file_kobj+0x1e4/0x230 [ 488.806361][T18724] ? sysfs_kf_write+0x166/0x260 [ 488.806372][T18724] ? __pfx_sysfs_kf_write+0x10/0x10 [ 488.806383][T18724] kernfs_fop_write_iter+0x3a4/0x540 [ 488.806394][T18724] vfs_write+0x612/0xba0 [ 488.806412][T18724] ? __pfx_vfs_write+0x10/0x10 [ 488.806426][T18724] ? do_sys_openat2+0x14e/0x200 [ 488.806437][T18724] ? kmem_cache_free+0x182/0x650 [ 488.806450][T18724] ? fd_install+0x94/0x3d0 [ 488.806465][T18724] ksys_write+0x150/0x270 [ 488.806481][T18724] ? __pfx_ksys_write+0x10/0x10 [ 488.806497][T18724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.806508][T18724] do_syscall_64+0x174/0x580 [ 488.806521][T18724] ? trace_irq_disable+0x3b/0x140 [ 488.806544][T18724] ? clear_bhb_loop+0x40/0x90 [ 488.806555][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.806566][T18724] RIP: 0033:0x7f117215e68e [ 488.806576][T18724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 488.806585][T18724] RSP: 002b:00007fff74c2e288 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.806597][T18724] RAX: ffffffffffffffda RBX: 000055555d9e2500 RCX: 00007f117215e68e [ 488.806604][T18724] RDX: 0000000000000001 RSI: 00007fff74c2e310 RDI: 0000000000000005 [ 488.806611][T18724] RBP: 00007f11722346f2 R08: 0000000000000000 R09: 0000000000000000 [ 488.806617][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.806622][T18724] R13: 00007fff74c2e310 R14: 00007f1172f54620 R15: 0000000000000003 [ 488.806633][T18724] [ 489.191436][T16048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.210672][T18853] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 489.269795][T18889] team0: Port device dummy0 added [ 489.280202][T18890] team0: Port device dummy0 removed [ 489.323903][T18724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.332523][T18724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.350634][T18724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.361060][T18724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.369005][T18724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.381716][T18724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.389691][T18724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.398429][T18724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.453916][T18724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.472344][T18724] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.483195][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.490351][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.502655][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.509806][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.520075][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.723386][T18724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.755357][T18724] veth0_vlan: entered promiscuous mode [ 489.764429][T18724] veth1_vlan: entered promiscuous mode [ 489.784150][T18724] veth0_macvtap: entered promiscuous mode [ 489.793735][T18724] veth1_macvtap: entered promiscuous mode [ 489.807230][T18724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.819876][T18724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.831320][ T7036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.841492][ T7036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.851946][ T7036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.862722][ T7036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.886233][T18724] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 489.905483][ T7036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.907151][T18724] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 489.916938][ T7036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.938601][ T7036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.947497][ T7036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.159356][ T4939] Bluetooth: hci4: command tx timeout [ 490.230959][T16052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.281446][T16065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.290952][T16052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.229275][ T4939] Bluetooth: hci4: command tx timeout [ 492.309769][T16054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.559726][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.350459][T16051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.389813][T16054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.430208][T16051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.589338][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.470080][T16054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.511273][T16050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog