last executing test programs: 3.846470196s ago: executing program 0 (id=8178): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xfffe, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) sendfile(r1, r0, 0x0, 0xf03a0005) 3.781906886s ago: executing program 3 (id=8179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00', 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlinkprop={0x34, 0x6c, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x1409}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x34}}, 0x0) accept$unix(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r2) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 3.432744593s ago: executing program 1 (id=8183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3.360242234s ago: executing program 0 (id=8184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x7, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026c170000400000004000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) 3.215308711s ago: executing program 3 (id=8187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x19, 0x1, 0xfffffffd, 0x24dfdbfb, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0x1, 0x3800}, [@RTA_GATEWAY={0x14, 0x5, @local}]}, 0x30}}, 0x0) r2 = epoll_create(0xef) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007c80)={0x14, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) 3.144598447s ago: executing program 1 (id=8188): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee0f409}]}]}]}, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x2404c811}, 0x0) 3.064314727s ago: executing program 0 (id=8189): r0 = socket(0x10, 0x6, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x10) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESOCT, @ANYRES8=r7, @ANYRESDEC, @ANYBLOB="000000001c000000000e00000100210002000000f5c95ee9a0b4e2e65608617408a74ee33414b8bdf81ebbffc28c40126b8cae394c121d495cc93aa0adeac3c90b3ee4d82f1932402d53c15f635fc6ef6ab3a7743f704226ac30d8b2d966eeab7e96759b233449c412119dc7d9e1070d2da1112abdb326", @ANYRES8=r8, @ANYRES32=0x0, @ANYRES64=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r12, @ANYRES32], 0x58, 0x800}}], 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r19 = syz_open_procfs$namespace(r16, &(0x7f0000001780)='ns/ipc\x00') r20 = getpid() sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="010000000200"/16, @ANYRES32=r16, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r17, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r19, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) r21 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b80)=@nat={'nat\x00', 0x19, 0x4, 0x488, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, &(0x7f0000000180), &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r17, @ANYRES32=0xee00, @ANYRES32=r21, @ANYBLOB="040700000000000074696d650000000000000000000000000000000000000010000000000000000018000000000000000500000009000000ff050000663b0000ffffff7f01000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c2000003000010000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000bd74042d2cdc4e930da4ac443834fb7a1a8d0a126942c96d77de99f2c2bb0000000000000000b9280000000000000000000000000000000000000000000000000000000002000000feffffff02000000110000001800000022eb67656e65766530000000000000000000766972745f776966693000000000000076657468315f746f5f7465616d00000062617461647630000000000000000000aaaaaaaaaabbffffffffff000180c200000300ff000000006e000000d60000000e010000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff000000004e4651554555450000000000000000000000000000000000000000000000000008000000000000000600000000000000736e6174000000000000000000000000000000000000000000000000000000001000400000000000aaaaaaaaaabb0000fcffffff000000001100000040000000809b0000000000000000000000000000000070696d72656700000000000000000000697036677265300000000000000000006272696467655f736c6176655f310000476c2bf2f48effffff0000ffaaaaaaaaaaaaff00ff00ffff6e0000006e000000a6000000736e617400000000000000000000000000000000000000000000000000000000100000000000000061427f4bd4a600001000000000000000"]}, 0x500) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.869070985s ago: executing program 3 (id=8191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4000}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/123, 0x7b}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.739338557s ago: executing program 4 (id=8193): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000006489cbe71579e42801fbd8000a8f000000632d0000000a0140000900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1a4, 0x10d04}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000006489cbe71579e42801fbd8000a8f000000632d0000000a0140000900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1a4, 0x10d04}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4}]}, 0x28}}, 0x0) (async) 2.652830262s ago: executing program 1 (id=8194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r1, &(0x7f0000000080)=""/253, 0xfd) read(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3d8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x3ac, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x2, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001, 0x0, 0x20000}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}]}}]}, 0x3d8}}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read(r1, &(0x7f0000000080)=""/253, 0xfd) (async) read(r1, 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3d8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x3ac, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x2, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001, 0x0, 0x20000}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}]}}]}, 0x3d8}}, 0x20000000) (async) 2.531363461s ago: executing program 4 (id=8195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x8) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.028203504s ago: executing program 2 (id=8196): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02051100040000000000000000000000020001eeffffffffffffff1800000000"], 0x20}}, 0x0) (async) poll(&(0x7f0000000040), 0x55, 0x0) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async, rerun: 32) listen(r5, 0x7) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5599bfabd36062135ce4af91dc2e191346c94e9fa6a1ff29abf7567b0050618f39d43c734a8b84fa6964df277622cd5c6d1060d3bd1faa23acfd5e1ef51c19e80dcb0258b45e5796489a5b936fc9096a39e09be1d1b637f133b95dced99da61b70657ccde2252bdea3ab0345bb6771d7e76207000000000000009801c57d34c489b63432948eae8df1fd7d09bdf1086f1dc62970f5b9ace4f8bb5ff01e", @ANYRES16=r7, @ANYBLOB="010000000000000000000400000008000700ffffffff08000800ac1434000800020007000000"], 0x2c}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 1.924765003s ago: executing program 0 (id=8197): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="010000009b0500000800000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000009001000000010000e0090300006000170611100000"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x8, &(0x7f0000000000)="6a0ea48a", 0x4) socket$inet6(0xa, 0x80000, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) getsockopt$inet_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f0000001b80)) recvmsg(r2, &(0x7f0000000900)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000006c0)=""/209, 0xd1}], 0x3, &(0x7f0000000800)=""/216, 0xd8}, 0x40010140) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00'}) r3 = socket(0x2d, 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x11d, 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000db000000000100000000000000000000000000000000000000000000000000010000000000d300000000000000000000000000000000fdffff0000ffffff000000000000000000000000000000000000000000000000fdffffffb56b6e000000000000000000"], 0xb8}}, 0x0) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r5, 0x0, 0x10000008ebc, 0x0) write(r9, &(0x7f00000001c0)="b4", 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000500)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000940)="753da5b81be7f3ed5b145870f82bfdbf06fd6c3039feb1ae28634029cb461841ab5d4aae897972f93e9bab6a892497a6a0f98b9c9179fef60f2f3bd51e239d0ff3c404f772f098b4245dea896e867baa449e3fae522479bc5fbf", 0x5a}, {&(0x7f00000009c0)="28c76b0655c719ebf02ad2c5bdfea9a17b42dcac74e92b1c368a7f0a9a969944ff454bb714634ffcd58f23de19dc3008", 0x30}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="c7a0413fd1", 0x5}, {&(0x7f0000001a40)="96e8539c3fa4465520c6359e8b1ab04dcf27b1c5447e09b17a8ad95f82349a51c9cb1f80d7abb78fd01fbe89f07d91c7f36e50a84795e43dd13cd833dd0d89712f6aba4bc0762d3c2208b05dff6e580483f613c2cfc601856e9118b986f6d07c4f9cff0d9656525ca44771eb9e5bb8ea8b9c8223bd0dfc68f59e9e2e430e6928667e25fdcb4330855eed4cbd51705a57caf158f0474c3db40daa87", 0x9b}, {&(0x7f0000001b00)='\"Z', 0x2}, {&(0x7f0000001bc0)="f98592bd35acba41851b79f8c5366d7c5dd182f4a51ea3bcada2a19751bab66449b036eeb394e4c97596bd7c02be2ae784be08a29bdcf7144bf6d8919fb28b2151d2542e04543b676b25ad344e000c67825e89144e88a3719cec8db780b4e59b41724457fa16b48253c349cd99bf30513ac0015d4deb381250252e0b50d29b44dc5df1a8f0b0ebb1ef184de07ac4c2dd657e3a5110c13316ec70fcbd80be2f698ec209c1752fbaa57e83c63fbd404605277d4faad82a7c93c8291cbcfa574f377ed293f79732a352450ad457a783d93eb39fd3644690bc12799730f88566bd4a684ff25f8d022b009595b49f019d5540ab001bbf6d21c6c7214008c47d5c65fb0bff5ebe03abf64f812cc599882a18db9bfa205ef63c06a890c1f91f818e7162cb661eb6c599b8720dec6972051263074ef2a0ec3fa4ef346e3ff5be4116bf041639d80cb01619bd809758f88b8af9362576b82330954bda8f964057e89ef1d983d7788c05ee1643e29a818a8ef2ef9591bd3158be498366aad4f5b5b84bfa57d5e872eeed4ca238aa47a44383308227e409d5877294125174f96b230bbc58b092aa70480c3f911e0f5b96c54e2406b5acd4530e891571fa77956662d5a593e245ccc3a4ca9e5f1b1ee2d9698c2208147cfcdc4471210b03d47aa5262072a359155f576234654f4503f628f7ebf3b76691fd332f31c9da5fdea31e25ce6b58a101212e57e175d224c790990c48736f27cad100e42d95c3afd577fd42e824292672f14d7d033dadf147eb79e3aa1e119520d86287ac6338e7b61b5592d9833860d39122254b2cf1ac85de994d89336eaf4b62768d195a9d9ea583bab3d87996f3bbb834edcfead6d1f5088f068d551a4faa05cc1daba8aac3e68332d24544563845c7abe4eda313f9fd6850f774e2327f15de8a0ecae461ed2f83d843f50f52d4fa3837dadcaefc7e76222eba231723db0f1bbfbfd1b0b02e0b9c12167933c04827f02b4e253e98c5bdc062ff2206f6cea2462a109003b1b0404dee2a3c2766e4716ea4ccf45dd3fb1b215a1feae34f08d850b16824677c3bb6ffb4a8b61b5d45289abfa85fec6f58e2a5e2dc651471801e50cc06815e099a4de44d936497abedfa5ec99816d1e709baaacfa4c6c263ddc64556930dc04f278877e3fe4a686879e41238f08ad864ce7c6bbb57302fc4e361ee518f4611f413ed8ea316a9ee2e79afa921793910a91fcb6a1c43def15531eedc162a29d6936792ee271194ffb8e6b5c9bc91b7631bb8b050f637e5a84ba52ae6b4eb89dcd88138f326920d33e648b8eeea3a24e4a2e285887b64ceef45774ab25c676f27888b15b679165815f0a6b387a8c5ade7f393c98d27a10868c951055849ea97a8a54399b3751a4a1c5dccb61535175d323b5cf7e591725abe4f4bed47f5176107ae47f5874565db4394e2b34899bda7b6868c964cc502cdbdd0091a7ba949bed1e6e6ee4807b782f9f7b64ce1f596a5e179277d274ed9b66cac27e9d7a33bb922d4bc835fd1ef17691b793c1da88af95d06531eb16fcff201cefa77174269b9643742719b9089c288d0c505904632051935bba3869beb8a1916f94bb08e4f0ffcbf7f97c8ac05680717c7233b591a67d7c7da530bd2d22fa694d8be185069f5f04ad2d405e2d0bb1e091f374d0bff177a895d60d140afc57ce331ab2f7b0495c2824766403b53de65e201307ea02b5246f87d93a4bd076c72649bac7fa4546d58abda16fc606ce55fa00f19b13d368eaaa2a2abeaaae9fd7c9c73aa412400fcbf206bdfd0298781ad9349832521d1c55d86256a2341697dfe1fa3fe73076a6d58e59129a9633f368d05f7fa46c9ce875696a4a650482abe79c79afc76f2859a5692b9756b518a011c511e958ea397998d1df0ddde7ebbd26771f3c9ed86cdf27698bc52d25a26eb4f46f69437c0a15528bd1ae75477f69d3409ee16d296c8900fb383a0f11aff83350610571448a420f6067a2a666d72c7cbe5de0d79ce67dab7fe5052370a1c3a982078ebf708da4159bec63d8f5d13ff7f026b0d88dd52110b8d76eb03e8e99df3f593dbcca8b4143ee24eb282841a443397d0dd46a8c901e5ad8b6cbbb5510725581a6469115cb789105b2a0d3446153104cbf5cd9cc613662cdb95d17cb81de3c55562947c48e49fa1a6f35a35f776c724ddfbe08d90f94ee89bdce33a997e6ea5d22aa738b45261ebae1f504a6ca8ffdf0b50433161762c992f581b6a92471b457eaf318e4fb8d5b3899f06deac4950673e658ba6049f47d41277234459ff6749253b62aa2e8379022f0918d427e3bb5861723d807e733c0eab62ef0bfaef95ea55d00c693caa0a3630aaeecad06b2f5df0e7fa5002c7f5b28ad9fb5684dce24421fcb604c8c5e00a1c01c207fc1d089297902d60c23f799b3062ce181f9ccf4408fb54bae36b47c731fc87ee7202b3ec4043691bb8b1d4be79165f87ec215cfbba0b376110a1c9c001973e8de5f89bfd1733b4d2064c015be4610ddeef641e503b1801ccb4409cc48cadd581413501157084dd99120b67e607e62fae135d58c8545c9c0bdfd7f2cb7c3f99eba70ce2095252cffba60cfe3c02ab7fbc30cb480ef8bc8d7abf0b19ce451a0305670fe38ff0c0d3328a0ed841925ac88d5f59dc9aeb64865d6b62266c3e36b88cc1581e0a489843cd1886690b2bd96c570bb5e8b353a73b0c07d409e1b4fcab19c973b72fe7ccc29103933cc4ac9cfc78ccedbc4df37f8b92e98fe4e5906857b729ec4dd60e0e8283f63e5d9d5dee5be8f24c64ff27ce50cfb6eafc938284d9c4b654a5be5bda921d4bf21fca6722178672a809c443558c0e3baeb74ee8df84d24fb7073b0934da9f3bc89f191238a15bc77d1813e90e3c8f145f0bc89973bf20dd6f678a5ec3f653debfce12b08f95be1e342a94f13c2d92ad50edb5998a6a49f247f428a69b04660dc5857d3837f5ebf2cc65fd6dbb632cb2301d5a670fdfc5d161d01403c659548d2638f4631796bb234bd539f1843d1c1629b07e34ec8fc003267eba96ccf11756b94bc1492271520a2ffef135efd1f7207a71182a7c23d8ff0a95f40396d89d83346e3939d0663d60e5b836df195a124ad946c563b37aa9c21d55fbb37e2590313164f75cb3acb1b69036731271b9b00770418da676c383cbada5c571654fce42f3f8a8f57190d3b44b3efb8f6743cec755294f7555ede7f1a106faac3ea68fd531614228e33609ae32fc2837bf39a3641cd3bc1bd53f9e79d00fb0a3166ffece8dfb3b2a678cdebcadb36f86b37ed9bf2587ff0f377e08c1d2216bd85b58e543820e66ccf812566b4f43af34defd1507d785861477c4dae38eca7c30228e6a78b48b01bc74edce2af0b20c2d04920d9429eac4a23998d8f1246146bdcf1d4f287d10b765649aa31d5cefd31632d7d0ee4985c701e20e185eed39504305eb78041fb673c3aa3853a448198db0911198a99c03b4533cd5ce4d4375a8f6b24be421231ad8202b40da039eb7415f39dc91f2579ea32d153f6d0ad49b7e0b553fd237717b6d6613cdce38b460f86dad7157a34cd4ada4a18a5a476c7b26c751f946620319d5ec72ceb9d5aeeff97937d08f1fba16f2aa7f9a5ff5fc080a37ba4330e1c2b930aa77bd31ebddcf377ff4e526e8cb207dbf042c4233626b0f4918d0c9cbdeefef2226bdf0b1cb9765c1656a9494fbd0f74650cb610e728a4ce40f7d38dda7f098beb6d28c58fca1b38b6cb2a3ca837d25757b95cb3d917b10d0235871cd633c9a5437f7b70d1cb95283eb61cba01632a942d0ae8deb1285966f1b98e59673c6befff6cd01e5c3eaa70ca7319ea821791d83a26f0ab5755d1d530ae59ebee19166cbeaf8f91a227c662d33cf610ed1a24fc5b0ec440081584e0d5150324a3e19e7c69f674a9d08c5d06ddd4d5f4ca889a5e98aeccdd9cda9648f464af48b12850e7d0bdeea3fffa25a3f2164431fa8c97c88661b90d62aa9a2789fc802c183b173a6573151ef2b6f1b7bf16a4ba0234f60a76efa89df90a3409ccec22819e17416ef4fd8e08e715dfa768de7971ff52e65450f0eae92b7c643a367f540c5f53df8da7c5979930a9bc20c1db2e255b0630c6efe554c5c67ac45cafa6a8131c5bea78c025a5278f10001c34efd189654624bd1d340b9892e8792addbd0a54dae7dfea2542619dd2fc1b9746c30a0bc1cfadb35c4d1b18faf3f1aca9b12aa523323369271709afb67818a22e6177ac8a9a633a064c2e91d7b693a364b83f8df1e8907b3605409a1f0556f80e5223f7bd0061acad4b7c538d75909d55955517f031c4c4f22dd9116f25b59f6a0dff3918ec6d94b52da2c2eb5a8980d8a0685663981e9a8c9411e2f8e6c09dc5530bb5a5f26df88e5c53b258aa97b70bac3a2bc1b90b673743c323e3f8911ee0d256674ee8e18b77aa91f4d0997244c6fd3499b39ca1ad713c8e35c82b13f7b74f714fadbe8e87875dc4f759c14d27c504d94a40ee10d832b2f402a2c9f2c39af21534c52437eabb8458db4e4004a199418c9f6864484728fc3f185209449f8176f64a11ea5c34f6db5358c687ca5c8f2a50e47adb4b992085029ad3163cb877c3fdc2ecf5899b1273cae2b767851ae7a57e5dd0444fb6b981bd005d7ceec259817230e12c8cbd761ee401b2686c48a19cab8b3428e051197d69d89227e66b107f7fd73f8209feebf2c9306730faf64db3f9ed422f592c4434bf44fab1cd6ccdcec14570888479a940e41a088dc795a2d877bf97347ec7ef0306244eb5b1758bd1a104a45c1794060421500e7a419583802b178fafc0b239665e91fef63d746b1b2f3f264b55381f2a49f0e06252adf4376b997ac4f8e3faac6cb7ae5b790c3e79cedb7f46f897c7db50ed1ce6c3bfafcd83a34c06833cd8399d3ff12df77d7012b37be25eb8993813e56a94b6437b1ed57345adf178040a9e7483f272a89c37ad4fabfaab923b7e854ad9159772dc6f1fd70a2ed77e59b0b7ab5a02c773ca0ab93ee39405016ceab51a5fe8d6a7bc7f63e65d18b116b1ffe7bcb6fdddffa31bbb987d4ad1ec3cae348654dc83d4801c4b14931972eb3105f5928fa88fe32957b5607477b5595f6872d6970b8e652224fd4cc33e1103ca7ee9eaf32f6f75d5e7c6c034bff8e11c136b668399ef53070ad0f99136791109c1ef158085b419aba372b93403ed3475efec3949ec88870624d37192c744e5e1cc211d42d7a10017f0ffed118be8cd87404e6ec562461284b8789590848aae3fdb8b0f44e5bdf5b4920624c29c2d920ad77a3e6dd96372ce6ab4bc671883fc29d5c649bd85b8be0aca801521043c890f61cf85de453f9a6da100f7809a1b83c4ee7287ed93085b0dde7454ac2e66b229de0992e99a17691d0b8758a747dc4c2a5929dd7c693d76293375bdf84774f60d9d5330833ec83a8edd6c900348967b1cc1a0cf597b094c4c441a0df198a30e0da4d0e859e73d9acaded61330b8c76c12d125733413ea40cea3a72e3defbade79e952ebad5b8ba817629342046da04a0a997d43f8bb804a73867ab8392340680d0c9b1f8cb180aa576f9d500b536d1978baaf21240ba9e544d4e628f22b5bbe8f32b04b25c0af46a2e078af84560ab0bc8a4672ad8b13cb9e56597d49ec9c2ea4340ceb0dbf37437934bd2da4726cefdb71360c2d5416e7ddd989e3e2b26dcc1b441fb73a1fd866a24236199fe5fd1083abce873439ce4bd8d76fdc66d782a34ba04f6fa4c466c80adb521790b2b1939a637b3984178184e93", 0x1000}], 0x7}}, {{&(0x7f0000002c40)=@generic={0x9, "222aca884feb6cb6bf9bf89009c01d722f5d754623c1d088abedac1e9920c89e4f0edd5ab6c2b143cc906fccec5502aeb116af795840db9a745ca2446d7fb756c0abba6b02299f446ef067cce61a619e97b4b3eb3d30b009ce659ecf83f1fd2108c800056be9b1dc1bc1e717df2af1ac80c94aa021cd001d7c0bcbc81eb8"}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002cc0)="c1a4221b967032f262d791da36", 0xd}, {&(0x7f0000002d00)="53e79b0bd6f7d4716d427e0da1c8cde2ad67f5ffab3b30da5e083598d70c1c8e2e6fbfdf12191a6e2cfb7aa7ff8a5eb1d0cb14b2cbb27985f883c61629eeb1ff067923f47a578b37450d20a93e97a4c42f4416cf060e175b28ed6af844552ca1b5a110024b3ce4", 0x67}, {&(0x7f0000002d80)="491d912f78a5fef9dec261bcef21a4b5a97ec1a3ad0a7631513d7cf9882beead021d02c629044f56323ada29632afb06c29fa1ced5bfba41fc0c742938b30dac85839b5028a77f32cdca4f18391f47d60a567ee9970d4ea35d0923bcbe5140a21922958a1b5ca0c20631e59335166ae98fe794d19c8dc5470cc9cb674ca2c264edaf901f5a76f78e82000ca9f2cdf9da75eb55a26f32f7fb1705fa921d1991f8064bafef63d6de7d1cbb52b0fc741a05", 0xb0}, {&(0x7f0000002e40)="59cc751a15137992df41b0ab27ba2d64f017c2042845c09548ebb2f9d6ee8ce7b929b2ff1f2ea3d4806d62782488787333e21c2e0e041b3adb039600ea744b81f0d45eaa94dceb6ed0d0029f68bb1bd437ca64350173eb49710ae104da110bf3d29df68297971cee8898b0d6e5b11c20be2a172e9a93ea3cdcca9065ab9575619faae791c654f9a7535497e500fcbcece83b556c70637518a042715a44601dc51468773a7b220079af1f92632abf5279a8b3205d3a0f13c8beb44e5b00bf8c52f300618062938fdcd33f53af8bb12d37a3aff64487f84f965bd6188e17679c61a6ced3ce386a1d75694b373a7992ccac005ddb34209a5c74eaf9eaffab5aa5e264a24f130f2d2589b74ecbf70c0237c6615ad2e004c6f09453c75990d51966ad2e3ab8e4d129623ca114b3d1b2eb51570dc7ea57213ac4140673cf3a09febe21c79b3603c919da120e4c70d87ff716144ed281c6a09488269fab2f0bd4019328f1c6f8d3f4e1850464df37dd7e81109651846dc1974962ce680e91349dfcda0bd1be3091518e0d42c714109d8654d40d0563d92ca8955b08bfae7c844ff840121889f0f67c72aeb2fded0921a361f14c3db96770193e84bd69d0c3470ca980f626b32a51af788b0c50eaa3fb5d1ec2527bf74fb8b29d6db83ffd3b59712a53fc0c626a3740946d79ce0fe4c4139b03ec8a4d4d069c02ba36ae88930e45d010b5440eac7e9229be18323b398c19ceef2ffec143111a4013b8becdb8b587f4970962ef1f1aedcd9257e0f589be7d85a98508a4324767d2360c2f6e0e8e479e40f4c740bee66f273456312004c84055aead849e79b31f856b8a0e826775ee3d9070e1c3ec96d9192667674f5657c502658340b3ca2018b576cef016d80ecb0b68cabf04838cf03b1ee33bca86b5bc156f0eededec3e966dc8e9455d15fa11d1d5c5e1630d6e0893042bd9c14ee4406bcc78dc7cbff26968bc1fbcdff1e332af54c4e9333cff08352c0d551aa7a9f829c93f203ee2c4e499b468d7e0504e91d27f61fd6289150dab44c00cd7e23b562e173b3761cfda9bb6ad0ebb3f692824316017550188c9299d7c695640ebbecd9749b968646ce68da6f27dcd80973a4ca520e2305f41a6a4a91ce6f8127d4367b52b3ab95934a7133d63ee2df884a02519e64f53dc736ab184479f5867a88721134a4151a275df81cb9b1f4f1c1fb022e5381250d3b288e1440e22d9da7a74782604f2cbb3a4f05dc9ae7a2fc1e02c702bb094bef8989c497bf217e2a3e88af91d637691aa5ba5c7b44f24570b0590b37b3637a924f1b658707fd735b53694f228e524976229ad0390b9a3d608cc22e5d493be3ed550b3d3ef6c20fef4bc6f644346a64857f5d3496a04941be64e44a5d3349afd51d03453f2dc7c7de77dd6a366e085c5d78e32ab68b3046f895c3234964030c528584c4d4969aafbc5600d8a167d9dd1bc71a107ad5ae5391a87f8674e8d706d93b51b5e19b34367717cf4590ff89cda8018f34312625ce4336cef6ebab1379d2391743c80b631fd11bd973c2806709da1e20f6d6bbbf527eb76ee5832c88f4ffe2007093fe4cd5b89a8397e111536d494e5ccc8f4fdcdf0918f01680f3066e1ebce91beef208f70b87f5db11ab0b838f13fff6f80872286f1322f2839112ab75091caccfc0b81445bd346e56129bbd523d7103bc4fb8e5a9d2b25d28399c6e784f902c729f821f32d5f92244b57d47109f668694abe5c37d702877bcd0d06aacce4e50f674e405fa19c0b5a15e22288ea8f66a11cdb21da92e28fa8782bc1e8d24697c6af938cc5bd6d9d9e000f1dad841bc2b40a692589eda993bddfda67d10dbb7ad733baafffe0c38021308daeae4f589ab513828a24b8bf0dc7d971f6ff6496259f87d36e33c66ec21d86f6e9996cfe2c2be98f7270673ae2c99c405b72266a0bade9d4113613a94386a1eb31f3bce4aeaefcbdb24ef2c4f5de9ff44596163a8975e5daf5e06dd5f6b6944aeac01592e1ce22dd4e88f459a57798690494ac5cf184b71fdf892f785342737a63cd2c301296681b5b9d640cf62b1d747a8e87acb8554ae7d468d412a34cd675647a8c7556cc75a427e3d35ad0bdd4df16cc09a640e35b62a0001f62fba5de449fb00572ab9a5e8ca54c64324f86904c8b4679a0e8d620f411d71127d4b88e9cc2241280492880536a9592e0537132be4ef2fd38efb2212a6819455d0ed7048523bfc6e104e5dbc7d6964e25695455cb8bff7f84ac8c9190ff72a28e6273a75e36ce8e96418e528c42f88ff9a2595eb6bc12f2b84c7594938a38d175c5f9473a1218e4c772b907cf0e2bbd0b1192131258c5a9d743c761402423cae61d04d73bcfc5ae0a7d9cd741be294d5d44b168cbe70e518ace618553db60458c95ce7e0907a576bcc95c3fad46cbff1dd1850b02ca61ee343a527b3677e4459d8b084154490e735375ac5318d766f8d57ab37c3d574f481d3346ec0414e063300bea6d8c18070c0915c06b7de891324e8b34b609fbef41d03ea7a5dfd00120aa18b1b04c21af1e8adbacd2af4eae0236f957515584461d15477321a14698f424049ec9063058e865a139707e623f1bcdd8dbe40a2ff0a3acf06c331c2778325a7f7e367754758fe525c967b26b92543137db9f69470814255cf122df5100652c97a3697b63402db46d56dfba1d77e16533a4d4ae0b20d35e9fa574b7cfefef3e2c411fc2c1a81d438d5649ec64dce3d8aef775cd3a335bd4a9056f46748598107acaa85165540c7db6b8f0f7c4429a2855320ed97b2d108269b33050e35a7543a373713cf686469ce2360f2d8469a93b7c2afd87ea5f49fdc85a8748f9453cef8b0efd67fd6ce129ec55243b8c083a08a8a4547121c463fd8dccdf4b07170a8591feaf1ad6281f5467a7c3007c350d16d635262adba95bd6df2693a71822c0a582d0ccb5cf10bc74e1bd17498519f2c4e1d97edfd33afe2849fd9b117e81a11773b72083bb35624f464ff8d9688baa82e110cac1bdcd1577bc46bd788a7cb928eac577618d59895d4ddc448c74e4e0b89eca62b86e60791c668e8147d463d5ef3c3729f76ed102d8437a6d4a4e1e145892810caac1402ccacf1ee7495f066b464c5555ab9bc8c99d63fc91b13e047e3a6ad9816463570d59f34b4b7b2f96b85f219c6c21f15ff5823b71823f7ca16586d5b785c9019f5e8964447634504e50c63f5466cc4d9969c699a09c457246a281a1f3dae5754ff7b08b71a9ff9bd294d0d626ad5c1797802c5acc7a26160735dc0b9c01797cc45c5aa6e2dd3ae5c2d3981e188a70384ffcd083323e6b0d10f73b58ff0e2304182eefbacec22b29e849feaf4f6696e7df4314e8b47b84a2b1d02d4b2ac11b73fc05a1f7eb2fc9da8836c234915cec71db58f1248ef50b278cb2b3803b1afca8ab6ed1d16f7e8a256909e55768d0931057c61a56d60ce386f031adca214159e7127df244779794c2807893d7c8f860205025529337d152dbb338a321ebbe9cb4b0ee268f85dce3b1a33116ded355e4a5910b7aafd30568f310fbeb04f54b7741c5bd9428af28522e6bdf92c7f57946721fe3ebe0ae31db103427febdb521a100a96e13cc08e611ca0a571d4c49453f3a81cdae687c696e4235faea02e500288a2719eae08b1d5d808c4ad84f7cd8f7ffc2613f90b50f62a38efe50c31ba074cf814cc52b0b7b37b04a00834a56660c90e6421a45de094e3464f0f2a203c1875a4addd1e1c700839cad37622bfa44984493516d48bbebacfee89f0cf85abb3795ccb23817b7350e2de83134844df1ea0c651f4f8ee8b803a4182eebbed547a3ce0e7f1018f2e88b652807a465eba5fc8e4962c4423d50ff206d0359a3a28ab62e35c8e19850af5bce94dc2268994d4cf63e0e3c03d41250c8915cd0e0418bc3451eae7208311adaccc8ff38222eedb949439e010f95fa777042c47113d4a03a869ee9b309c7f790e17c7a73541360bd69c947d10f5eba24154945c1f6cdaea99747dbc0f9b4f89804fa951b866f07f1877faa555b63ca99fee512208fd446da975d4bc58407e960b1f4543da429e8ed0d3948e665c750ee7e53cba176243cdb5b8897ce8cefdea421c934c7184f5fd81fdb77379d5bee178ad18942fe2d74c05ca0edf74f26f5d06ed281be2582caf486929d366b5523431f24238a349270f6033b55da1d5113e2ecee16dd3a246c2f83112368c593768a3c355553ce260718f994ea59af71062b88562f37eaff8efb928726ec708e5bd7e781485c5e8395f6f7640fdfab815f37bad176b438b1d49c1a0c3905491515a1cafd76ca596387d5ccc736e278a62abdf8e9d59c3a0c35c08bacf07ceadb1ad243191f9b5e12b0156e58f0d656ec426cc8476024954bb2533aa3c28b94ff1deba900e59911d1e648b74514d20584b5f805de77da15091ab8f97a492c73b5e3fa94d8f212f2c6cae8977c4c15ef4bd81bf8d57017ebbb64765d2836004af55d20da1bb337ad1877e90039c557c2bab96ea3d4a9d8bfd7247483bee07ead5f88995e6d2244d9c5f79a76d358c841e78dd38d1fa76ee19a9f01dd46569ab926a04846dde0b8e1fbacc77960e30430c51612387398814e13be4bac4a0133149a1d041327632892a63724c844bf3ea3a59c88bf19b6cca94f6ea25b16b39ec76385034fe8bc358a8054a2ab9a1c51f731a07acad2a1dbb6ff60161e2e8b7820c9a64b2afb42793ec4c364f6538d89cc9a37e867203c8835ab5ea6537c94f3aa683c0afd25174165210ff772e915cabcaed9e9b4a93908c8fe8b308c5546246800fb263aca508bafb644a157e22d53f46a45c4770f4b4626538434b2de4d5c73a970ee653d9666e49a65fcbd38e930b5438e611b703739a6b40aff69aa8e21ba8c54b754b5f539ad05b1bbd2cf83648696c0398db3aac66ec2b305d3beb9bd8f92d50b2659c11e931d75fa897414e28997cbc1117ba4f90840d3cba2f19780601edca0e4c2b696aec2d31bec994251590a6b8cd695e589ab5d9abeb6657a2a94c7e9bbade3a4ea5f1a4671deb0f1d1efdb4571f166c6f75af6afd7b4ce03e1e56ebcdcb01f256f02bd185aaa09873bea26f52ea15a332d78cdc055eb1d3ffe1727711f6aaf7c9a0bcba2560a635b40750aa0f7db74d94ff23abd2a04abee5fe0d14fa4e62a74926c4fd357f8c338bfcb93bdf30f10668a98e576cf4d485e182e0e3d89de96aaaa59d669f28ca2b5a348b5163835c6622cb296eda09f80c37d2fd22e3862010a480b8dfdc1447e7d94a570845996cb900b42c8bdab361bfbf6196991551180c69d8d39aa4a8120d3a90968adcde09770acdaf893d223c0745fd7e7b8a5dcc5b35212802ad4046848593b198c7f758d9b756ed33657d9cc18efb0e1a4c9f9f9d9bf4ea2f710910f2ebc11219a76db55518584fe1b23b7344baaf88f248c4fd11ea7f206bd283797d233a7fb81f55048a17482c008c4a4ac3d9cd5072b09560582c5d3b0f1889aab5be3a3b4b03138207c26ea7a6dfd6cbe0123a3fa0df0df98aa63d047dc68c521fce690804c197788062a92cc65f285833c588971dee7ef5289a54f5b496c22dbd12bb265f7a5a91a1fe056b87cbd6e2196600c85c0135d4c07c74dc28e5f89b44a7f2c09bce3e29b09d24697bd89168ba2e594a096bf24e6573fc18669158d636eef615f2e08645cc7ecf1116d5d29ce7d47527a56130b77fe55463ff4510a0df02aa26648d31613ff59061c7f937e938903e58fd1e0356bc6487b208e0826", 0x1000}], 0x4, &(0x7f0000004300)=[{0x18, 0x6, 0x2, "a8"}, {0xe0, 0x1, 0x7, "9c74e4a3faf8a597cc16d542c3503507f3ca26e8c6d2601acf183252839c65b707df503656dcf45ee6fe96a64193019e3c8e2e226d6ea8ee14d6efaa8d705e14dd0adb4130ec4bae5e90f0ffe96cfe56a68f045a7f1f9137c803e1544d5dfc399cf808e8aa2610fc0dbe267e7ea08042227f02720fb0358962d9e9532484615426b52babf80e8720ca610b6aac7d9c88379cfa010bed930b77142a517baea30e562e752119eeb54c4f4a6d795194a6cf8a70ef243756b75dec7b9cfd9fe80c9f0f0621c35a03fa00df72c6fd69b28bd9"}, {0x10, 0x29, 0x2e0}, {0x110, 0x84, 0xa, "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"}, {0x58, 0x6, 0x101, "def2a2a1a58df54fb4e1bbcf0a2a0d4d040637907a4e59289210b5a9361f2a897a2f325fef8a76f869ea47517c0fc08457968f8dd088d72a5736cd5405ce7f41fa144df926a6"}, {0x108, 0x10a, 0x785, "6eb276d312f2165b1f937d8830bbc07dde79e54c4a84da1fcf3d06d4e8284a0688d202eb7096cf4b4cd0597caf9b9b3648dc78c226413c4d2e7a3bf9b5242b47d1a6e5cdb2bbcf51d5c1ab263314f309bf210d865fb6d4f00a0e626a9b8cad8ed09164a4d9d613ecee7276f203c337f5ec6170ab7ab7e9b2f1089acfc2241e696b69980782f8af255280d87ba6775ba3cffba42ddb6c196a52865699b8dce99a55e8c7373b7da1aa2bc959054775dc36fc600e9fe05c47a033d85cc3d7745414bb905ada4499225b0c64b0fa98bef32b6fe631ab46a42f0e559142be39909bf28c62e98a556b30e7b00308e82e280883c46d645aa6b57833"}, {0x28, 0x84, 0x653, "9081d979cc846cfff4c3ab313a779af5663c1e72e5"}, {0x50, 0xff, 0xc0000, "5b001b844a5f153176273d55ef69f89b848b46b6fe5437f5784249e3b341254f95892c318d2f4c32724fb57f5ca744886a489ce14da69e2ff1c4233d21c4a2"}, {0x28, 0x107, 0xa2, "21eab76fa844d86a047c8eb34b640d5a2982"}, {0x28, 0x118, 0x8, "7012c3a73f01f23ec9fe88d85934969cc7059462eb"}], 0x440}}], 0x2, 0x20004880) splice(r4, 0x0, r9, 0x0, 0x25a5, 0x0) 1.921867761s ago: executing program 1 (id=8198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r3, 0x0, 0x55, "bdddb2e4ee2964f5c800e06fa305a9a471f00d7b340175a965cf7300e6188419e5a902659bf17aeba42218cb37e0701dffbc571b5d494645e30b9325e8992c34b93a237208eea2b50c033ae243b32a7ce4f280da5a"}, 0x5d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x224, r5, 0x321, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0xc, 0x3, "8efe44f4ebf4080b"}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "869bfd7bb18095cc85e3e60034e6d266f2a4547a9ab09e8b894ad2a873d28fe3ef7c373ea96f9d996d5617dad5ff316fa41936872c7912204e032430bfd5f464677718f2f4a8ae81af2d650c63f92702fac2308278bf3948da5ac0d8dbcd26fd47b73b3de9e6647136c65bd884023d511ca62dab54f8df46728dcbd1b72242fa7455e4506f46dfa922f712080666c4b08065cade89e56ecc9404dbabe8d38c2ff37f916686a6de8a241b818cd1b2058b99a3c9403ab4e0a67281cc9999d410c316107d7a5b53ffdec448dda47c985bbee9bdad9fe806c6d508a568"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e293c323d9969ca4c46b4d3265f66b0ff00e2b77527341834ff6f460"}}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "ed1c211d2c9bf4f6001a2e6db62a6abdfa79f679e7cdb5c26e2cc8a66db5d43b6d26b880ee5fc3eca573ff91f5b8cf164629049fa9d76dccab75a78905ab740637bdfac9647300b566dd3b138f55c24d4b05909249be3a09c7286847b5258abbc8014ee4bae4fcfe95ef1379af5a30a21b9e4c09b29b06a06b3909a7d769c0f97775055ed2e9806044765bc904df3375e400080d414ba43134d66f87526341c0d6ddedb70ff583e8a8ca1e8178"}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40810) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240000000060800014000000014080001400000000d05000300000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 1.864315823s ago: executing program 3 (id=8199): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000000c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "77b8c20c66fd91"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000010c0)={{r1, 0x7, 0x9, 0x401, 0xfffffffffffffffe, 0x1, 0x8001, 0x4, 0x6, 0x1, 0x400, 0x2, 0x9, 0x2129, 0xffffffff}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40488c1}, 0x4000050) 1.779799612s ago: executing program 4 (id=8200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 1.640652008s ago: executing program 2 (id=8201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000102010100000000000000000000000a2000038006000340000400000c0002800500010000000000060003400001000006000740000400000c0003800600034000040000700003802c000180000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100060000002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb06000340000400000800044000007fff5e3407022bef1d3b5c48c981b6c0d3d62afc56bb9453e8b17f170bd6a0cb261c6baa08dc3146875afb2ac9b8452b223fd88e9867d0ade7a6"], 0xc0}, 0x1, 0x0, 0x0, 0x4800}, 0x4091) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xe1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}]}]}, 0x50}}, 0x0) 1.612311449s ago: executing program 3 (id=8202): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000900)=ANY=[@ANYBLOB="34000000b2d6b8e3db467fe4d3b83db45db2096db93131f1aea973996ce58abc97e0e5220c023a1b9c9b43f9102967c9af6af1d37ad8fa91186ffb2cbff81a854dc58d3cf5bf1af4c60d2a8903aa95bd0fea04e8a3b76d6cde", @ANYRES16=r0, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="040013000a000600ffffffffffff000006001200fdff0000"], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r5, 0x4010744d, &(0x7f0000000080)=0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r4, 0x18}, 0x38) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r5}, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x65, &(0x7f00000002c0)=""/101, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0xd5a6, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3, r4, r3, r4], 0x0, 0x10, 0x7}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007600090b000000000000000003000200000000000800050000000eb5"], 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x0, 0xa1, 0x8d, &(0x7f00000004c0)="94204a174129720bc739c3c9957d071b797b78eca51b6948b3861a7b91aa37d99eba38bd078cea938d401bdca69a1a06c9bd9f42b44f40036b1f15d5d9881cb1a08df44492ab112c7160fa449c9a21ac1229c1dcf7d673c8536acd8e8a143ae5ba51608c08daa0e8580b1338afa22ea0dc116077ba52a0ccbc04f33a7030bbc06d6d97af817338bcace91df6e24a47e07904db6c96d67b430b442eeddce1249e8e", &(0x7f0000000580)=""/141, 0xfffffff8, 0x0, 0xffffffffffffffba, 0x91, &(0x7f0000000640)="2ce962af335e6a6339d350c095d8ab8e387b60a458fe1dabfc7919cc734928bb3d6334c703b12c2278b858000d0a08eff878d482e71be6c3cd736791c9ff1352806403e39a245789da28e21d6be24d17b42d530730df3baa53ee1235573707f4ba94c4d2c0bc9b856c94384e95108ab7b040a283a9a608c7868184e4", &(0x7f00000006c0)="5156c5803d7fa239f6e004c8b40b753b83253d5c0db80fc0d9cbbd9e0f805bf810b49a8a73ccdcfd289cf4c5000f2a8c504a62efaa196a9ee2d881a189589472b727f521786fb2fc4886f567fa09897ca5f80e83c7e3f58db2aa875d227163b21ed8c16d5536e8da12c5d452d502cad30a7cb81aabae3315ebb9987a1e669edd764dd3730f396bb97b06d2f4c11e8a9e39", 0x2, 0x0, 0xfffffff8}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200)=0x8, 0x12) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r12, &(0x7f0000000300)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0, 0x4a, 0x0, 0xfffffffd, 0x4, 0x10000, @value=r6}, 0x28) bind$packet(r11, &(0x7f00000006c0)={0x11, 0x0, r13, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) sendfile(r10, r9, 0x0, 0xbdc4) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'ip6tnl0\x00', @local}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000a20000000000a05000000000000000000050000000900010073797a36000000002c000000030a01010000000000000000050000000900030073797a30000000000900010073797a30000000002c000000060a010400000000000000000500000008000b4000000000040007400c0006400000000000000002140000001100010000000000000000000000000a000000000000000000"], 0xa0}}, 0x0) 1.423852417s ago: executing program 4 (id=8203): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)={0x1}) accept4$unix(r0, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x30, r0, 0x4e1d9000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x4, 0x6, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x24}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9d4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2d2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11a9}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x24040800) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8000000000000000}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8b}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x87}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}]}}, @CTA_LABELS_MASK={0x10, 0x17, [0x6, 0x8001, 0x3]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xa422]}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @CTA_NAT_SRC={0x4}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x200400d8) 1.329910488s ago: executing program 1 (id=8204): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x24, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_PHYS_PORT_ID={0x23, 0x22, "6c7253aeee34f05f987b729ba8c433dc72356739a0e535c65ad0172318cdac"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000002dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d80)={&(0x7f0000001b00)={0x1258, 0x34, 0x8, 0x70bd25, 0x25dfdbfc, {0x1f}, [@generic="3e53c8a098293fcd88d68ae0b266e3282e3b5a411da558b616589ee4b386c3e1603a39b30b56b9190f16215e7ba4c127f347673a2fbe8a21f4f2293aa372dc1055f1c72a95c20c7379cceb447b5ef7d167c6d5ad9bd5ceb60189a2d84e406fb14f01cc73e98c389fbb30c6559d44c7bce4e603c2df4cc54b80743d80a61ce0c9d851ea767066ddeb2f4536f0441fc77fb93f39e05439cf30e1774cc777970ea8a0ec049d0bd817a5108fb958a6ffa87f09abb7bfb8dcc702536112c79ff67e6c85ed939c30d774963f991a92632f6b90cba7fd20b462457aca8b5f27efd00b99c485e1a30090", @nested={0x1090, 0x47e, 0x0, 0x1, [@nested={0x4, 0x10b}, @nested={0x4, 0x15c}, @nested={0x4, 0x5}, @typed={0x1004, 0x120, 0x0, 0x0, @binary="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"}, @generic="b5d5af22a81d1c54120a0d49d1ff1d3c8fb217e4d5d59d4bf40931546ff9adebe9f27f9a0ec441d64efb016a351799383151939ce7daa06772e6c96e4fe674a233cd992ae5d7ca19977d621072a5a968fe9ade6d41e6c36768444e8a9dd1c435bbb81ea4c408691f568e2a833a18a83524ff0dc13284475a4c19b9c4"]}, @generic="818be89e72b1d0694fbfa705d1b26fff908f2479ce1aacf3a945b3c762eeac1dda8f9d6c62d322b1004b2525657e0054d95510780b8f217eaed5a5b750f1e3a16e87ab559ee98b37983d13b8dfb5cce689e4447f2632f1e10d96996ffe8d9c792db498c619fdb0e519a5ae3d3aacf22b35c400fb0ab793954c9673f198b35e6014c75d73e1edafcef86d74a3e7236592c93a3a27b3b88139be656df0062445dbba7e61781fa4d8ccbe1c42ae38926718be67c951b95ff7eac9cda779fcc24702936ce315752862e0d137e5cf"]}, 0x1258}, 0x1, 0x0, 0x0, 0x40800}, 0x20040811) 1.260009307s ago: executing program 2 (id=8205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 911.163755ms ago: executing program 4 (id=8206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x1006}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0xa4, 0x34, &(0x7f0000000000)="1a54486175369b8cb84786864f960a47fdaa29b6869fca616007f15c8a73415e6e47f1da88a525567fe2863164f80d7bba8e58bee4e389230cc3ee8c3055c9ba69bb3f800d91db53e785b7b3f094280c1d55132aa0c13c13f2f79076a05158349e31adc2e218efaf50ce2dd99e7a512997b9780bd80bf073d7e0bab141cdf446b6fe19913beb03e2bb92c513dced16d24a0ac75a697f791f672d24ce273b9257252c09f5", &(0x7f00000000c0)=""/52, 0x2, 0x0, 0x9a, 0xa5, &(0x7f0000000100)="8d2e0350379e03b658eb63030a937c1b3d3b66dad8a0e52f1452b75a728f6befa903c5a2480a644b6a22c0268a00cd5fed538ccbd964db421026d6d4e0448a4e31942a6ee61c49d422cbf6c1cda7e7eb3292c8174e0bc5318201fb0a0dfde5b4908864219a51356a4d34da10a2c8cf6e2dd95cf750a2e4f2289dc10daa132899ebe9c5d3d46dca44f116c59d9709588477d8e8587fa9e706d97a", &(0x7f0000000380)="3d5c6e794d2dba936ef48c209514b11ee8cf4897c4515f4b2657b52f53c51b9b8002f9bdc73a0036c30b36bf73ac7eb7dc0bb98ab26c4f52b29a0bf3337c53d8c124076da65e484fcc34ab2579fb9b8eac812e9523765faae14b097ae75c5e240b5e0b4f09431eb806a305cccb1e2b02d5b41ebb86f2e0caf32b63d7c274b7112e8bfcc2e2e6080b358f6c5d521fb2ab4a7179e7bef32f536efd6406cd0ede1356df40b824", 0xb}, 0x50) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) 879.101942ms ago: executing program 2 (id=8207): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)={0xffffffffffffffee, r1, 0x501, 0x70bd26, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000897}, 0x2c0400c1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 853.567238ms ago: executing program 1 (id=8208): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) listen(0xffffffffffffffff, 0x3) sendfile(r0, r3, 0x0, 0x20000000002) socket$inet6(0xa, 0x80002, 0x0) 687.511619ms ago: executing program 0 (id=8209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x20, 0x8, 0x40, 0xfffffffe, {{0x12, 0x4, 0x2, 0x19, 0x48, 0x65, 0x0, 0xb, 0x4, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x34, 0x3b, 0x3, 0xf, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c41964830000000000000000000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x18, r2}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x6e, &(0x7f00000001c0)=""/110, 0x41000, 0x54, '\x00', r4, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x8, 0x8, 0x81}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000800)=[r6, r7, r8, r9, r10, r11, 0x1], &(0x7f0000000840)=[{0x1, 0x3, 0x1, 0x3}, {0x2, 0x5, 0xa, 0x4}, {0x4, 0x3, 0x3, 0x8}, {0x0, 0x4, 0x5, 0xa}, {0x1, 0x3, 0xa, 0xa}], 0x10, 0x1}, 0x94) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffff6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) (async) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000900000073119d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000002d000709feff0e0002000000097c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4c855}, 0x0) (async) r15 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000100"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 555.421799ms ago: executing program 3 (id=8210): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x42}, 0x28) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000001f000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x9) sendto(r5, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20004050, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200130024000480200020e8070001006374000014000280080002400000000d08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) recvmmsg(r5, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)=""/222, 0xde}, {&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000002d00)=""/4107, 0x100b}, {&(0x7f0000000b00)=""/238, 0xee}, {&(0x7f00000008c0)=""/257, 0x101}, {&(0x7f0000001040)=""/108, 0x6c}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/70, 0x46}], 0xa}, 0x3}], 0x1, 0x2040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x8880) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 549.085989ms ago: executing program 2 (id=8211): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet(0x2, 0x4, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x7ff) 131.446519ms ago: executing program 0 (id=8212): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) getsockopt$netlink(r4, 0x10e, 0x1, &(0x7f0000000000)=""/36, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) r6 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x52, 0x0, &(0x7f00000002c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000010a010800000000008000000a0000000c0004400000000000000030000000001970c977ff05f0b5cff582e3e48fbd2bbcbb87ca7c50745781dfb4527cbd0bbeefb29312af44dd89001597286c50246c72db77d1c70eef576630a5f2bc7ba436a986af67ec3205080000000000000006481b481263f9fae2c9a7c4f58255cd0dc7b08de9354b10e6b088e0eca50c79b469f5ffe92e090fe878e03c299e790901911e8ea5c23cfe962ecbd862b5a9e8df033c2a7f7480d75de74dca9f58000d3d59a93798914818674f703919f3d52dee69606aa9080ec7f24fde3116ad271b83348a1adfcc054ab873baf4d47cc8295a0000000000", @ANYRES8=r7, @ANYRESHEX=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2004c074) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) connect$inet6(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r9, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r9, 0xaa0f7000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x10000}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) 37.847486ms ago: executing program 2 (id=8213): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x18, 0x5, 0x1) getsockname$packet(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', r1, 0x7, 0x1, 0x3, 0xd5, {{0x47, 0x4, 0x0, 0x29, 0x11c, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x2}, {@private=0xa010101, 0x6}, {@multicast2, 0x49}, {@remote, 0x3}, {@local, 0xcd}, {@rand_addr=0x64010102, 0x3}, {@loopback, 0xfffff000}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0xffff}]}, @timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x9, [{@empty, 0x2}, {@multicast1, 0x8}]}, @rr={0x7, 0x17, 0xb7, [@dev={0xac, 0x14, 0x14, 0x23}, @local, @broadcast, @loopback, @empty]}, @noop, @cipso={0x86, 0x1f, 0x0, [{0x7, 0x5, "e303fa"}, {0x1, 0x2}, {0x2, 0x3, "c6"}, {0x6, 0xf, "b6019715a420d8b96405926691"}]}, @cipso={0x86, 0x3d, 0x1, [{0x0, 0xa, "f15e8cbe647a822c"}, {0x6, 0x10, "18da2f759d7f873490d2759b0e0c"}, {0x6, 0x3, "13"}, {0x1, 0x2}, {0x1, 0xa, "8b69728c452abb36"}, {0x2, 0xe, "5d8d9ba1c01422fbb8d6fc57"}]}, @generic={0x86, 0xc, "364f45380538a7f4e99a"}, @timestamp_prespec={0x44, 0x24, 0xb3, 0x3, 0x3, [{@multicast1, 0x6}, {@rand_addr=0x64010101}, {@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x401}]}, @ra={0x94, 0x4}]}}}}}) 0s ago: executing program 4 (id=8214): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000000000000000000007000000140000000000000010010000100b664a000000000000000019737fde05c8a100c71ae6d19ff31952ab4fa17f3c0429cd03ac2d94114ea1db0c1c94225e9a8cbde3b240dc0f4ebe45e70dd58eea804da89508fd13941ecf5bf2679f3f71ea2986fdaf075a117ef3a6bea6e5cc828927fb4387406bbc3d34889fb8a33170f6d7204f2afe0501d3b708720106c8aba22eb7f3511f0a7015680d0859ea9a8bdc0b858cc95c04a32ef137057712e3028205274f8a30eb7b2e9642fb93da073c7aab3c86aa34b4ed20"], 0x28}, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000001c0)={0x2}, 0x8) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ed222dbd7000fddbdf253400000008000300", @ANYRES32=r8, @ANYBLOB="14005500cc9b"], 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4018000}, 0x2000040) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff8c05, 0x7, 0x6, 0x9, 0xfffffffa}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) kernel console output (not intermixed with test programs): o relocate VQ 0x0 after dequeue, screwing up backlog [ 878.165217][T31277] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 878.420567][T31290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6466'. [ 878.447364][T31290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6466'. [ 878.459843][T31290] vlan0: entered promiscuous mode [ 878.607656][T31301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6468'. [ 878.648896][T31301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6468'. [ 878.672953][T31301] netlink: 'syz.2.6468': attribute type 10 has an invalid length. [ 878.681787][T31301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6468'. [ 878.816243][T31310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.819825][T31311] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6471'. [ 879.106612][T31324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6475'. [ 879.141237][T31326] netlink: 'syz.1.6477': attribute type 13 has an invalid length. [ 879.161749][T31326] veth1_macvtap: left promiscuous mode [ 879.169338][T31326] macsec0: entered allmulticast mode [ 879.189633][T31326] syz_tun: entered allmulticast mode [ 879.199101][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.231126][T31326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6477'. [ 879.288344][T31325] syz_tun: left allmulticast mode [ 879.361514][T31334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6481'. [ 879.406118][T31334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6481'. [ 879.934518][T31364] bond5 (unregistering): Released all slaves [ 880.235219][T28863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.393747][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.579822][T31395] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 880.772217][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.825558][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.013364][T31388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.025777][T31388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.239946][T27645] nci: nci_rsp_packet: unknown rsp opcode 0xd00 [ 881.282598][T28861] net_ratelimit: 187 callbacks suppressed [ 881.282620][T28861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.511351][T31388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.537544][T31388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.654962][T31429] veth9: entered promiscuous mode [ 881.707290][T31428] veth11: entered promiscuous mode [ 881.736993][T31437] bridge0: port 3(batadv1) entered blocking state [ 881.745119][T31437] bridge0: port 3(batadv1) entered disabled state [ 881.753071][T31437] batadv1: entered allmulticast mode [ 881.762943][T31437] batadv1: entered promiscuous mode [ 881.869724][T31388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.880766][T31388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.954631][T31417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.223632][T11109] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 882.233503][T11109] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 882.281699][T31388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.292700][T31388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.317215][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.474843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.994222][T27655] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.027608][T27655] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.258403][T27655] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.287408][T27655] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.306328][T31498] netlink: 'syz.1.6525': attribute type 1 has an invalid length. [ 883.338254][T31498] netlink: 'syz.1.6525': attribute type 3 has an invalid length. [ 883.352688][T28861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.362269][T31498] netlink: 'syz.1.6525': attribute type 3 has an invalid length. [ 883.381357][T27655] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.420921][T27655] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.442864][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.486516][T31496] __nla_validate_parse: 15 callbacks suppressed [ 883.486536][T31496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6524'. [ 883.571899][T27645] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.594161][T27645] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.744860][T31516] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 884.258056][T31543] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 884.294973][T31546] syzkaller0: entered promiscuous mode [ 884.305957][T31543] xt_hashlimit: size too large, truncated to 1048576 [ 884.314461][T31546] syzkaller0: entered allmulticast mode [ 884.407354][T28861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.430505][T31549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6536'. [ 884.433808][T31551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6539'. [ 884.739367][T31563] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6541'. [ 885.349714][T31595] pim6reg: entered allmulticast mode [ 885.457192][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.638728][T31606] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.6550'. [ 886.089493][T31627] team0: Caught tx_queue_len zero misconfig [ 886.121533][T31630] lo: entered allmulticast mode [ 886.221713][T31630] dvmrp8: entered allmulticast mode [ 886.243681][T31636] netlink: 'syz.4.6557': attribute type 1 has an invalid length. [ 886.258423][T31629] lo: left allmulticast mode [ 886.270770][T31634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6560'. [ 886.305401][T31639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6561'. [ 886.331587][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.472944][T28861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.565036][T31646] netlink: 'syz.3.6563': attribute type 6 has an invalid length. [ 886.626823][T31653] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6565'. [ 886.657101][T31657] netlink: 'syz.0.6566': attribute type 1 has an invalid length. [ 886.767980][T31649] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 886.778524][T31649] bond5: option packets_per_slave: allowed values 0 - 65535 [ 886.788588][T31649] bond5 (unregistering): Released all slaves [ 886.899474][T31657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.960001][T31673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6569'. [ 886.988532][T31673] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6569'. [ 887.000150][T31661] bond1: (slave ip6gretap1): making interface the new active one [ 887.015379][T31661] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 887.260244][T31665] veth3: entered promiscuous mode [ 887.306820][T31665] bond1: (slave veth3): Enslaving as an active interface with a down link [ 887.325932][T31684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.418686][T31661] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 887.597559][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.606718][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.975204][T31711] netlink: 'syz.2.6581': attribute type 2 has an invalid length. [ 887.980923][T31710] netlink: 'syz.3.6580': attribute type 2 has an invalid length. [ 888.236598][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.255562][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.716896][T28863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.874333][T31748] netlink: 'syz.3.6592': attribute type 1 has an invalid length. [ 888.897015][T31748] __nla_validate_parse: 3 callbacks suppressed [ 888.897036][T31748] netlink: 756 bytes leftover after parsing attributes in process `syz.3.6592'. [ 888.961322][T31758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.119044][T31764] netlink: 'syz.4.6596': attribute type 8 has an invalid length. [ 889.353741][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.364238][T31776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6598'. [ 889.470959][T31775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6599'. [ 889.800387][T31786] syzkaller0: entered promiscuous mode [ 889.810351][T31786] syzkaller0: entered allmulticast mode [ 891.841222][ T5760] net_ratelimit: 5 callbacks suppressed [ 891.841242][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.072724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.393044][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.406629][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.883982][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.916783][T28863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.018014][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.707566][T31862] ip6t_srh: unknown srh invflags 4000 [ 894.747873][T31865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6621'. [ 894.788230][T31865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6621'. [ 894.843934][T31867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6622'. [ 894.865667][T31871] netlink: 'syz.1.6623': attribute type 1 has an invalid length. [ 894.883686][T31867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6622'. [ 894.888242][T31871] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6623'. [ 894.893164][T31867] openvswitch: netlink: Missing key (keys=40, expected=100) [ 894.957924][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.016650][T31875] netlink: 'syz.2.6624': attribute type 1 has an invalid length. [ 895.033562][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.042779][T31875] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6624'. [ 895.065870][T31875] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6624'. [ 895.259023][T31888] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 895.307297][T31886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6630'. [ 895.382765][T31894] xt_hashlimit: size too large, truncated to 1048576 [ 895.458077][T31895] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.568176][T31895] bridge_slave_0 (unregistering): left allmulticast mode [ 895.579378][T31895] bridge_slave_0 (unregistering): left promiscuous mode [ 895.587609][T31895] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.057624][T31918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6637'. [ 896.547476][T31924] syzkaller0: entered promiscuous mode [ 896.559803][T31924] syzkaller0: entered allmulticast mode [ 896.935671][T31958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.035734][ T5760] net_ratelimit: 6 callbacks suppressed [ 897.035755][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.124345][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.185035][T31969] netlink: ct family unspecified [ 897.196999][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.210791][T31969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.301789][T31966] xt_hashlimit: size too large, truncated to 1048576 [ 897.842997][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.852796][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.085363][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.169900][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.129679][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.804504][T31997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6653'. [ 901.201779][T32009] netlink: 'syz.4.6659': attribute type 1 has an invalid length. [ 901.313108][T32009] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6659'. [ 902.113550][T32052] netlink: 'syz.2.6668': attribute type 2 has an invalid length. [ 902.233614][ T5760] net_ratelimit: 8 callbacks suppressed [ 902.233635][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.314946][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.360690][T32060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6672'. [ 902.392672][T32060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6672'. [ 902.496241][T32073] openvswitch: netlink: Duplicate or invalid key (type 0). [ 902.531274][T32073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.600915][T32076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.620211][T32076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.633447][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.654996][T32076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.791881][T32076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.824845][T32076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.245199][T32109] netlink: 'syz.2.6687': attribute type 2 has an invalid length. [ 903.261803][T32112] netlink: 'syz.4.6689': attribute type 9 has an invalid length. [ 903.279034][T32109] netlink: 'syz.2.6687': attribute type 1 has an invalid length. [ 903.458340][T32119] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 903.516713][T32119] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 903.545367][T32119] gretap1: entered promiscuous mode [ 903.562102][T32119] gretap1: entered allmulticast mode [ 903.711671][T32138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6697'. [ 903.796357][T32144] netlink: 'syz.2.6695': attribute type 16 has an invalid length. [ 903.819064][T32144] netlink: 'syz.2.6695': attribute type 17 has an invalid length. [ 903.965360][T32147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6695'. [ 903.996684][T32150] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6700'. [ 904.066578][T32154] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6701'. [ 904.115277][T32136] syzkaller0: entered promiscuous mode [ 904.130995][T32136] syzkaller0: entered allmulticast mode [ 904.139376][T32144] lo: left promiscuous mode [ 904.147270][T32144] gre0: left promiscuous mode [ 904.154182][T32144] gre0: left allmulticast mode [ 904.162220][T32144] erspan0: left promiscuous mode [ 904.178367][T32144] bond0: left promiscuous mode [ 904.184078][T32144] team0: left promiscuous mode [ 904.299519][T32156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6702'. [ 904.335899][T32144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.350673][T32144] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 904.371186][T32144] gretap1: left promiscuous mode [ 904.391665][T32144] vlan2: left promiscuous mode [ 904.399425][T32144] bridge0: left promiscuous mode [ 904.409233][T32144] sit1: left promiscuous mode [ 904.424786][T32144] sit1: left allmulticast mode [ 904.440373][T32144] veth3: left allmulticast mode [ 904.458255][T32147] netlink: 'syz.2.6695': attribute type 4 has an invalid length. [ 904.558128][T32128]  speed is unknown, defaulting to 1000 [ 905.024884][T32174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6708'. [ 905.391860][T32128] lo speed is unknown, defaulting to 1000 [ 905.850761][T32211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6720'. [ 906.639959][T32225] batadv_slave_0: Caught tx_queue_len zero misconfig [ 906.819535][T32229] xt_limit: Overflow, try lower: 271964/0 [ 907.049494][T32235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6729'. [ 907.077035][T32237] netlink: 'syz.0.6730': attribute type 5 has an invalid length. [ 907.109644][T32237] netlink: 'syz.0.6730': attribute type 11 has an invalid length. [ 907.155415][T32237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6730'. [ 907.432819][ C0] net_ratelimit: 17 callbacks suppressed [ 907.432842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.479245][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.479391][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.527901][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.233151][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 908.439447][T32290] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6745'. [ 908.573508][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.583528][T28863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.713952][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.853747][T32315] tipc: Enabled bearer , priority 24 [ 908.907594][T32318] syzkaller0: entered promiscuous mode [ 908.915684][T32318] syzkaller0: entered allmulticast mode [ 909.522637][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.539517][T32322] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 909.583102][T32327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6755'. [ 909.593441][T28863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.594503][T32322] bond10 (unregistering): Released all slaves [ 909.602947][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.047920][T32338] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002 [ 910.418672][T32351] syzkaller0: entered promiscuous mode [ 910.430167][T32351] syzkaller0: entered allmulticast mode [ 910.463240][T32356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6765'. [ 910.483373][T32356] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6765'. [ 910.530875][T32356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6765'. [ 910.554884][T32362] xt_nat: multiple ranges no longer supported [ 910.561499][T32356] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6765'. [ 910.575997][T32356] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6765'. [ 910.627817][T32360] IPVS: length: 8 != 1152 [ 910.781037][T32369] netlink: 'syz.4.6768': attribute type 13 has an invalid length. [ 910.892712][T32370] __nla_validate_parse: 1 callbacks suppressed [ 910.892736][T32370] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6768'. [ 911.408783][T32397] syzkaller0: entered promiscuous mode [ 911.467286][T32397] syzkaller0: entered allmulticast mode [ 911.516570][T32398] tipc: Started in network mode [ 911.546412][T32398] tipc: Node identity 1eac2aa1f298, cluster identity 4711 [ 911.564609][T32398] tipc: Enabled bearer , priority 0 [ 911.578043][T32401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6775'. [ 911.600565][T32396] tipc: Resetting bearer [ 911.688530][T32396] tipc: Disabling bearer [ 912.068972][T32433] netlink: 'syz.0.6783': attribute type 13 has an invalid length. [ 912.110550][T32422] syzkaller0: entered allmulticast mode [ 912.474956][ T2176] net_ratelimit: 9 callbacks suppressed [ 912.474979][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.675162][T32447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6788'. [ 912.709523][T32447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6788'. [ 912.723623][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.733610][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.131520][T32460] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6793'. [ 913.690850][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.771155][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.780303][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.838431][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.809595][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.819720][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.763335][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.056910][T32444] syzkaller0: entered promiscuous mode [ 916.063555][T32444] syzkaller0: entered allmulticast mode [ 916.094566][T32453] pim6reg: entered allmulticast mode [ 916.107428][T32454] pim6reg: left allmulticast mode [ 916.663805][T32487] pim6reg1: entered promiscuous mode [ 916.669310][T32487] pim6reg1: entered allmulticast mode [ 917.061399][T32483] sch_fq: defrate 5 ignored. [ 917.105621][T32497] syzkaller0: entered promiscuous mode [ 917.122841][T32497] syzkaller0: entered allmulticast mode [ 917.395462][T32517] netlink: 'syz.3.6807': attribute type 1 has an invalid length. [ 917.751074][T32517] bond1: entered promiscuous mode [ 917.800087][T32517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.911435][T32542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6813'. [ 917.922985][ T5760] net_ratelimit: 7 callbacks suppressed [ 917.923004][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.937047][T28860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.945887][T32542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6813'. [ 918.069926][T32548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6814'. [ 918.256656][T32553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6815'. [ 918.721088][T32566] netlink: 'syz.1.6819': attribute type 1 has an invalid length. [ 918.889122][T32575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6820'. [ 918.898953][T32575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 918.947834][T32566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 918.961180][T28863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.961802][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.977719][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.058113][T27655] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.059428][T32575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6820'. [ 919.088539][T27655] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.110698][T32575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 919.120232][T27655] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.120278][T27655] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.141439][T32578] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6822'. [ 919.507648][T32588] syzkaller0: entered promiscuous mode [ 919.552467][T32588] syzkaller0: entered allmulticast mode [ 919.586501][T32587] syzkaller0: entered promiscuous mode [ 919.593081][T17386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.628354][T32587] syzkaller0: entered allmulticast mode [ 919.691522][T32594] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 919.758110][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.852287][T32597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.911062][T32600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6829'. [ 919.914330][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.928953][T32600] netlink: 'syz.1.6829': attribute type 10 has an invalid length. [ 919.992749][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.001313][T28860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.131204][T32600] geneve2: entered promiscuous mode [ 920.137055][T32600] geneve2: entered allmulticast mode [ 920.533257][T32610] netlink: 'syz.4.6833': attribute type 1 has an invalid length. [ 920.567104][T32610] netlink: 'syz.4.6833': attribute type 4 has an invalid length. [ 920.644745][T32615] netlink: 'syz.2.6835': attribute type 12 has an invalid length. [ 920.857176][T32617] netlink: 'syz.2.6835': attribute type 12 has an invalid length. [ 921.242293][T32629] tipc: Enabling of bearer rejected, failed to enable media [ 921.315401][T32634] batadv_slave_0: Caught tx_queue_len zero misconfig [ 921.505788][T27645] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.565888][T27655] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.609053][T27655] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.653310][T27647] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.714356][T32650] lo: Caught tx_queue_len zero misconfig [ 921.842075][T32656] team0: entered promiscuous mode [ 921.851178][T32656] team_slave_0: entered promiscuous mode [ 921.907580][T32656] team_slave_1: entered promiscuous mode [ 922.090598][T32660] bond10 (unregistering): Released all slaves [ 922.200563][T32669] pimreg: entered allmulticast mode [ 922.503315][T32683] netlink: 'syz.1.6855': attribute type 8 has an invalid length. [ 922.603673][T32687] bridge0: port 1(ipvlan2) entered blocking state [ 922.637748][T32687] bridge0: port 1(ipvlan2) entered disabled state [ 922.663479][T32687] ipvlan2: entered allmulticast mode [ 922.687763][T32687] bridge0: entered allmulticast mode [ 922.724598][T32687] ipvlan2: left allmulticast mode [ 922.762764][T32687] bridge0: left allmulticast mode [ 922.769274][T32698] netlink: 'syz.3.6861': attribute type 11 has an invalid length. [ 922.798326][T32686] lo: Caught tx_queue_len zero misconfig [ 922.867931][T32702] syzkaller1: entered promiscuous mode [ 922.915141][T32702] syzkaller1: entered allmulticast mode [ 922.953236][ T2176] net_ratelimit: 7 callbacks suppressed [ 922.953258][ T2176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.086647][T32706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.120847][T28862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.132571][T28860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.215601][T32725] netlink: 'syz.3.6864': attribute type 58 has an invalid length. [ 923.292529][T32725] __nla_validate_parse: 17 callbacks suppressed [ 923.292551][T32725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6864'. [ 923.361305][T32712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6864'. [ 923.417353][T32728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.428977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.525640][T32730] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6866'. [ 924.078799][T28860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.160272][T28862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.169298][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.247501][T32730] geneve1: left promiscuous mode [ 925.193223][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.298865][ T304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6877'. [ 925.351888][ T305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6877'. [ 925.547852][T32730] batman_adv: batadv0: Interface deactivated: gretap1 [ 925.890617][T32741] netlink: 'syz.1.6869': attribute type 8 has an invalid length. [ 925.903438][T32741] sch_fq: defrate 0 ignored. [ 926.008889][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.058753][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.108181][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 926.134707][ T308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6879'. [ 926.145737][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.175160][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.205289][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 926.238927][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.268475][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.287484][ T316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6882'. [ 926.296656][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 926.416143][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.450777][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.483799][ T329] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6882'. [ 926.500679][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 927.108101][ T350] bond2: invalid ARP target 0.0.0.0 specified for addition [ 927.116832][ T350] bond2: option arp_ip_target: invalid value (0) [ 927.128320][ T350] bond2 (unregistering): Released all slaves [ 927.190624][ T348] bond2: invalid ARP target 0.0.0.0 specified for addition [ 927.205093][ T348] bond2: option arp_ip_target: invalid value (0) [ 927.215288][ T348] bond2 (unregistering): Released all slaves [ 927.330770][ T369] xt_TCPMSS: Only works on TCP SYN packets [ 927.340162][ T365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6891'. [ 927.564980][ T372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6894'. [ 927.595345][ T381] x_tables: duplicate underflow at hook 2 [ 927.657196][ T372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 927.674330][ T372] gretap3: entered promiscuous mode [ 927.679732][ T372] gretap3: entered allmulticast mode [ 927.791441][ T388] netlink: 'syz.0.6899': attribute type 22 has an invalid length. [ 927.966041][ T392] bridge9: entered promiscuous mode [ 927.980839][ T392] bridge9: entered allmulticast mode [ 928.064124][ T409] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 928.312837][ T5760] net_ratelimit: 9 callbacks suppressed [ 928.312858][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.322807][ T417] __nla_validate_parse: 2 callbacks suppressed [ 928.322826][ T417] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6905'. [ 928.329011][T28839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.352998][ T419] xt_nat: multiple ranges no longer supported [ 928.399409][ T417] xt_socket: unknown flags 0x50 [ 928.670383][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6912'. [ 928.851274][ T443] netlink: 'syz.4.6914': attribute type 1 has an invalid length. [ 928.904990][ T443] netlink: 'syz.4.6914': attribute type 83 has an invalid length. [ 928.955097][T28851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.195127][T28851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.227142][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 929.246210][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 929.257677][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 929.268162][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 929.278229][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 929.353881][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.362260][T28839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.811958][ T467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6918'. [ 929.821849][ T467] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6918'. [ 929.832158][ T467] netlink: 'syz.4.6918': attribute type 5 has an invalid length. [ 929.843296][T28851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.874008][ T467] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6918'. [ 929.897390][ T465] bond0: option ad_select: unable to set because the bond device is up [ 930.152950][T28851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.394156][T28839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.402801][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.658147][ T484] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6919'. [ 930.807378][ T507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6923'. [ 930.886615][ T509] Bluetooth: MGMT ver 1.23 [ 930.947673][ T511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6927'. [ 930.959924][ T511] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6927'. [ 930.988685][ T447]  speed is unknown, defaulting to 1000 [ 930.995147][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6923'. [ 931.363188][ T5630] Bluetooth: hci0: command tx timeout [ 931.487970][ T521] bond0: Caught tx_queue_len zero misconfig [ 931.509967][ T521] netlink: 'syz.0.6930': attribute type 21 has an invalid length. [ 931.775993][ T447] lo speed is unknown, defaulting to 1000 [ 931.777726][ T528] tipc: Enabling of bearer rejected, failed to enable media [ 932.094731][ T12] veth5: left allmulticast mode [ 932.102525][ T12] veth5: left promiscuous mode [ 932.115326][ T12] bridge3: port 1(veth5) entered disabled state [ 932.192180][ T12] pimreg: left allmulticast mode [ 932.241426][ T549] netlink: 'syz.1.6937': attribute type 1 has an invalid length. [ 932.360248][ T12] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 932.803177][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 932.853255][ T12] bond8 (unregistering): (slave geneve4): Releasing active interface [ 932.893106][ T12] bond5 (unregistering): (slave geneve3): Releasing active interface [ 932.911463][ T12] bond3 (unregistering): (slave geneve2): Releasing active interface [ 932.931480][ T12] geneve1 (unregistering): left allmulticast mode [ 932.950666][ T12] team0: Port device geneve1 removed [ 933.341721][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 933.355340][ T12] team0: left allmulticast mode [ 933.360639][ T12] bond0 (unregistering): Released all slaves [ 933.372024][ T12] bond1 (unregistering): Released all slaves [ 933.390668][ T12] bond2 (unregistering): Released all slaves [ 933.408770][ T12] bond3 (unregistering): Released all slaves [ 933.428815][ T12] bond4 (unregistering): Released all slaves [ 933.460684][ T12] bond5 (unregistering): Released all slaves [ 933.481550][ T12] bond6 (unregistering): Released all slaves [ 933.498896][ T12] bond7 (unregistering): Released all slaves [ 933.514327][T28839] net_ratelimit: 410 callbacks suppressed [ 933.514348][T28839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.518164][ T12] bond8 (unregistering): Released all slaves [ 933.520370][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.542092][ T12] bond9 (unregistering): Released all slaves [ 933.878855][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 933.888409][ T583] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 933.919892][ T12] tipc: Left network mode [ 934.246026][ T587] macvlan2: entered promiscuous mode [ 934.269361][ T587] macvlan2: entered allmulticast mode [ 934.530100][ T604] sctp: [Deprecated]: syz.3.6945 (pid 604) Use of int in max_burst socket option deprecated. [ 934.530100][ T604] Use struct sctp_assoc_value instead [ 934.553240][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.561680][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.591519][ T604] netlink: 'syz.3.6945': attribute type 1 has an invalid length. [ 934.769128][ T612] __nla_validate_parse: 3 callbacks suppressed [ 934.769149][ T612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6945'. [ 934.953999][T28851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.076365][ T608] bond2: (slave geneve2): making interface the new active one [ 935.086836][ T608] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 935.184514][ T625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.193682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.315811][ T612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 935.423789][T27651] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 935.557870][T27651] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 935.603514][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.611867][T17377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.627823][T27651] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 935.678926][T27651] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 935.731396][ T634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6948'. [ 935.741710][ T633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6949'. [ 935.782250][ T634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6948'. [ 935.814357][ T636] sctp: [Deprecated]: syz.1.6949 (pid 636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 935.814357][ T636] Use struct sctp_sack_info instead [ 935.831471][ T634] netlink: 'syz.3.6948': attribute type 15 has an invalid length. [ 935.876499][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 935.915734][T28835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.219653][T27659] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 936.257700][T27659] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 936.286369][T27659] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 936.362144][ T657] netlink: 'syz.1.6952': attribute type 1 has an invalid length. [ 936.437286][T27659] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 937.008668][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.044575][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.080965][ T447] bridge_slave_0: entered allmulticast mode [ 937.145920][ T447] bridge_slave_0: entered promiscuous mode [ 937.190845][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.220278][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.242066][ T447] bridge_slave_1: entered allmulticast mode [ 937.308308][ T447] bridge_slave_1: entered promiscuous mode [ 937.579649][ T702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6962'. [ 937.627075][ T702] ip6tnl0: Caught tx_queue_len zero misconfig [ 937.847147][ T447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.886028][ T447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.981263][ T12] hsr_slave_0: left promiscuous mode [ 938.020488][ T12] hsr_slave_1: left promiscuous mode [ 938.715209][T28840] net_ratelimit: 98 callbacks suppressed [ 938.715233][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.729486][T28838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.793652][T28835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.955191][T28835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.179784][ T717] tunl0: Caught tx_queue_len zero misconfig [ 939.202150][ T714] tap0: tun_chr_ioctl cmd 2148553947 [ 939.240056][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 939.256566][ T447] team0: Port device team_slave_0 added [ 939.274148][T28835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.305262][ T447] team0: Port device team_slave_1 added [ 939.413940][ T744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6971'. [ 939.661190][ T447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.708900][ T447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.762732][T28838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.771224][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.773799][ T30] audit: type=1804 audit(1783123145.804:10): pid=762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6976" name="/newroot/114/memory.events" dev="tmpfs" ino=596 res=1 errno=0 [ 939.792136][ T447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.901140][ T30] audit: type=1800 audit(1783123145.804:11): pid=762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6976" name="memory.events" dev="tmpfs" ino=596 res=0 errno=0 [ 940.001759][ T447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.022741][ T447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.074092][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.102624][ T447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.335451][ T12] IPVS: stop unused estimator thread 0... [ 940.384954][ T447] hsr_slave_0: entered promiscuous mode [ 940.389799][ T779] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6980'. [ 940.431446][ T447] hsr_slave_1: entered promiscuous mode [ 940.454111][ T447] debugfs: 'hsr0' already exists in 'hsr' [ 940.471751][ T447] Cannot create hsr debugfs directory [ 940.641353][ T793] netlink: 'syz.3.6984': attribute type 83 has an invalid length. [ 940.670700][ T793] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.6984'. [ 940.714109][ T793] openvswitch: netlink: Flow actions attr not present in new flow. [ 940.716134][T28835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.875678][ T806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6987'. [ 940.929183][ T806] geneve2: entered promiscuous mode [ 940.974543][ T806] geneve2: entered allmulticast mode [ 941.566157][ T828] netlink: 'syz.1.6992': attribute type 1 has an invalid length. [ 941.803587][ T828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 941.922272][ T832] bond3: (slave ip6gretap1): making interface the new active one [ 941.952746][ T832] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 941.993517][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 942.026830][ T834] veth3: entered promiscuous mode [ 942.039487][ T834] bond3: (slave veth3): Enslaving as an active interface with a down link [ 942.095833][ T845] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 942.177295][ T842] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 942.616789][ T854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7000'. [ 942.666529][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7001'. [ 942.942820][ T864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7003'. [ 942.986159][ T30] audit: type=1107 audit(1783123149.014:12): pid=865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lDžV fakdD@UUp ܱߗ' [ 943.155228][ T876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7006'. [ 943.540748][ T889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7008'. [ 943.599689][T28835] IPVS: starting estimator thread 0... [ 943.723188][ T893] IPVS: using max 27 ests per chain, 64800 per kthread [ 943.912999][ C0] net_ratelimit: 6 callbacks suppressed [ 943.913022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.929297][T17377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.070697][ T906] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 944.385580][ T917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7014'. [ 944.410781][ T447] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 944.479337][ T447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 944.529968][ T939] netlink: 'syz.3.7015': attribute type 1 has an invalid length. [ 944.607966][ T447] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 944.640913][ T447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 944.657197][ T447] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 944.669616][ T447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 944.773353][ T939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 944.790664][ T447] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 944.835333][ T447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 944.875824][ T939] vlan2: entered allmulticast mode [ 944.893860][ T939] veth0_to_bond: entered allmulticast mode [ 944.955548][T17377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.975139][ T939] bond3: (slave vlan2): making interface the new active one [ 944.994375][ T939] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 945.993535][T28838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.153391][T28855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.032735][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.312107][ T916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 947.603421][ T1028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7017'. [ 947.638367][ T1027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7017'. [ 947.698234][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7017'. [ 947.727234][ T1032] team0: No ports can be present during mode change [ 947.880485][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7017'. [ 947.896746][ T447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.024868][ T447] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.075962][T28838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.131641][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.138901][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.200465][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.207738][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.114365][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.194401][T28835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.266405][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.350820][ T30] audit: type=1804 audit(1783123155.384:13): pid=1112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7033" name="/newroot/127/cgroup.controllers" dev="tmpfs" ino=663 res=1 errno=0 [ 949.497090][ T30] audit: type=1800 audit(1783123155.384:14): pid=1112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7033" name="cgroup.controllers" dev="tmpfs" ino=663 res=0 errno=0 [ 950.037373][ T1148] xt_hashlimit: size too large, truncated to 1048576 [ 950.071826][ T1143] vxcan1: entered allmulticast mode [ 950.089315][ T1144] netlink: 'syz.1.7040': attribute type 11 has an invalid length. [ 950.148343][ T447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.164059][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.317970][T28835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.448318][ T1165] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7043'. [ 950.604017][ T447] veth0_vlan: entered promiscuous mode [ 950.610483][ T1169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7045'. [ 950.669640][ T447] veth1_vlan: entered promiscuous mode [ 950.807130][ T1177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7046'. [ 950.838644][ T447] veth0_macvtap: entered promiscuous mode [ 950.874810][ T447] veth1_macvtap: entered promiscuous mode [ 950.950393][ T447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.956795][ T1185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7050'. [ 950.979009][ T447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.007911][T28855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.091116][T11109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.115784][ T1186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7050'. [ 951.127170][T11109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.202522][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.324648][ T1198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7054'. [ 951.447659][T11109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.481797][T11109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.536798][ T1210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.705950][ T1215] Bluetooth: MGMT ver 1.23 [ 951.932473][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.979166][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.991521][ T1220] netlink: 'syz.1.7059': attribute type 39 has an invalid length. [ 952.033443][ T1228] team_slave_1: Caught tx_queue_len zero misconfig [ 952.170041][ T1229] bridge2: port 1(veth5) entered blocking state [ 952.181317][ T1229] bridge2: port 1(veth5) entered disabled state [ 952.188402][ T1229] veth5: entered allmulticast mode [ 952.196608][ T1229] veth5: entered promiscuous mode [ 952.209230][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.221332][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.237580][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.245810][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.278879][ T1226] bridge2: port 2(veth0_to_bond) entered blocking state [ 952.290923][ T1226] bridge2: port 2(veth0_to_bond) entered disabled state [ 952.304227][ T1226] veth0_to_bond: entered promiscuous mode [ 952.403988][ T139] bond3: (slave vlan2): link status definitely down, disabling slave [ 952.449064][ T139] bond3: now running without any active interface! [ 953.035488][ T1263] __nla_validate_parse: 1 callbacks suppressed [ 953.035511][ T1263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7073'. [ 953.075411][ T1261] netlink: 'syz.2.7072': attribute type 2 has an invalid length. [ 953.089222][ T1261] netlink: 'syz.2.7072': attribute type 3 has an invalid length. [ 953.107476][ T1261] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7072'. [ 953.221290][ T1263] syzkaller0: entered promiscuous mode [ 953.248038][ T1263] syzkaller0: entered allmulticast mode [ 953.342252][ T1274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7077'. [ 953.439711][ T1279] netlink: 'syz.2.7078': attribute type 1 has an invalid length. [ 953.762760][T19321] Bluetooth: hci2: command 0x0401 tx timeout [ 953.771003][ T5630] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 954.313597][ T5760] net_ratelimit: 5 callbacks suppressed [ 954.313619][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.292611][T28835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.360294][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.404214][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.437502][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.498798][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.641489][ T1320] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7088'. [ 957.712043][ T1320] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7088'. [ 957.747630][ T1322] lo: entered allmulticast mode [ 957.780424][ T1322] tipc: Started in network mode [ 957.801538][ T1322] tipc: Node identity ac14142f, cluster identity 4711 [ 957.804405][ T1329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7091'. [ 957.821994][ T1322] tipc: New replicast peer: 0.0.0.0 [ 957.840545][ T1322] tipc: Enabled bearer , priority 10 [ 957.915042][ T1335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7093'. [ 957.942807][ T1335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7093'. [ 958.144698][ T1329] syzkaller0: entered promiscuous mode [ 958.150557][ T1329] syzkaller0: entered allmulticast mode [ 958.314602][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.438054][ T1358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7096'. [ 958.476083][T28840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.045268][ T1378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7101'. [ 959.523596][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.492579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.561172][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.580187][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.362065][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.616043][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.179981][ T1354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.188024][ T1354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.196943][ T1354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.204438][ T1354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.277724][T28838] tipc: Node number set to 2886997039 [ 962.361360][ T1387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7103'. [ 962.749062][ T1397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.080741][ T1421] netlink: 'syz.2.7113': attribute type 1 has an invalid length. [ 963.263879][ T1429] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7115'. [ 963.492675][ T1436] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 963.593837][ T1442] Cannot find add_set index 0 as target [ 963.627443][ T1447] Cannot find add_set index 0 as target [ 963.668729][ T1438] IPVS: persistence engine module ip_vs_pe_ not found [ 963.671353][ T1442] netlink: 'syz.2.7120': attribute type 2 has an invalid length. [ 964.058627][ T1459] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7124'. [ 964.087937][ T1455] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7123'. [ 964.094008][ T1459] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7124'. [ 964.282151][ T1463] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 964.553955][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 964.921444][ T1496] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7135'. [ 965.410308][ T1504] sctp: [Deprecated]: syz.3.7136 (pid 1504) Use of int in max_burst socket option deprecated. [ 965.410308][ T1504] Use struct sctp_assoc_value instead [ 965.742018][ T1526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7141'. [ 965.773044][ T1527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7140'. [ 965.815775][ T1531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7141'. [ 966.294026][ T1554] netlink: 'syz.2.7145': attribute type 1 has an invalid length. [ 966.296356][ T1543] 8021q: adding VLAN 0 to HW filter on device bond4 [ 966.331984][ T1549] ipvlan0: Caught tx_queue_len zero misconfig [ 966.565948][ T1562] netlink: 'syz.3.7148': attribute type 1 has an invalid length. [ 966.582649][ T1562] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7148'. [ 966.757268][ T1567] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 967.152220][ T1575] syzkaller1: entered promiscuous mode [ 967.158124][ T1575] syzkaller1: entered allmulticast mode [ 967.200192][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7152'. [ 967.440577][ T1578] macvtap1: entered promiscuous mode [ 967.469846][ T1578] vlan0: entered promiscuous mode [ 967.493305][ T1578] macvtap1: entered allmulticast mode [ 967.519853][ T1578] vlan0: entered allmulticast mode [ 967.541400][ T1578] veth0_vlan: entered allmulticast mode [ 967.588100][ T1577] bridge0: port 1(bridge_slave_0) entered listening state [ 967.705529][ T1590] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 967.798129][ T1590] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 967.848796][ T1590] gretap1: entered promiscuous mode [ 967.887436][ T1590] gretap1: entered allmulticast mode [ 968.521302][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7163'. [ 968.870067][ T1621] bond1: entered promiscuous mode [ 969.015759][ T1630] team0: No ports can be present during mode change [ 969.062834][ T1627] tun0: tun_chr_ioctl cmd 1074025675 [ 969.104907][ T1627] tun0: persist enabled [ 969.238990][ T1633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.511765][ T1634] __nla_validate_parse: 6 callbacks suppressed [ 969.511790][ T1634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7168'. [ 969.656477][ T1648] netlink: 'syz.4.7171': attribute type 2 has an invalid length. [ 969.677673][T19321] Bluetooth: hci2: command 0x0401 tx timeout [ 969.710184][ T1648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7171'. [ 969.953894][ T1650] syzkaller0: entered promiscuous mode [ 970.015391][ T1650] syzkaller0: entered allmulticast mode [ 970.339694][ T1657] syzkaller0: entered promiscuous mode [ 970.354626][ T1657] syzkaller0: entered allmulticast mode [ 970.738837][ T1667] syzkaller0: entered promiscuous mode [ 970.761864][ T1667] syzkaller0: entered allmulticast mode [ 970.921620][ T1681] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.968444][ T1681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 970.975860][ T1681] IPv6: NLM_F_CREATE should be set when creating new route [ 971.345156][ T1690] netlink: 'syz.0.7186': attribute type 1 has an invalid length. [ 971.356431][ T30] audit: type=1800 audit(1783123177.394:15): pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7185" name="memory.events" dev="tmpfs" ino=156 res=0 errno=0 [ 971.546644][ T30] audit: type=1804 audit(1783123177.574:16): pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.7185" name="/newroot/27/memory.events" dev="tmpfs" ino=156 res=1 errno=0 [ 971.639908][ T1690] bond3: entered promiscuous mode [ 971.663770][ T1690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 971.963155][ T1709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7190'. [ 972.607204][ T1720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7194'. [ 973.126221][ T1742] xt_ecn: cannot match TCP bits for non-tcp packets [ 973.290620][ T1748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7202'. [ 973.496053][ T1754] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 973.577356][ T1754] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 973.645296][ T1754] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 973.900142][ T1772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.183344][ T1777] veth7: entered allmulticast mode [ 974.278897][ T1777] bond4 (unregistering): Released all slaves [ 974.388442][ T1780] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7209'. [ 974.547485][ T1786] syzkaller0: entered promiscuous mode [ 974.607174][ T1786] syzkaller0: entered allmulticast mode [ 974.641379][ T1784] tipc: Started in network mode [ 974.660123][ T1784] tipc: Node identity a6f3fc54bc2b, cluster identity 4711 [ 974.691385][ T1784] tipc: Enabled bearer , priority 0 [ 974.826304][ T1796] netlink: 'syz.4.7213': attribute type 2 has an invalid length. [ 974.844954][ T1796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7213'. [ 979.707314][ T1793] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 979.712718][ T1778] tipc: Resetting bearer [ 979.856530][ T1778] tipc: Disabling bearer [ 979.884320][T28849] IPVS: starting estimator thread 0... [ 979.972896][ T1817] IPVS: using max 26 ests per chain, 62400 per kthread [ 980.064949][ T1822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7216'. [ 980.091902][T28835] tipc: Node number set to 450427988 [ 980.121544][ T1822] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20001 [ 980.201233][ T1816] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 980.718161][ T1838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7223'. [ 981.239258][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7226'. [ 981.483124][ T1864] IPv6: NLM_F_CREATE should be specified when creating new route [ 981.574950][ T1868] IPv6: NLM_F_CREATE should be specified when creating new route [ 981.637156][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7228'. [ 981.654679][ T1864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 981.662250][ T1864] IPv6: NLM_F_CREATE should be set when creating new route [ 981.717689][ T1868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 981.725124][ T1868] IPv6: NLM_F_CREATE should be set when creating new route [ 982.197913][ T1878] ipt_REJECT: TCP_RESET invalid for non-tcp [ 982.274107][ T1878] netlink: 'syz.4.7230': attribute type 1 has an invalid length. [ 982.408811][ T1878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 982.448175][ T1881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7229'. [ 982.738774][ T1893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7235'. [ 983.324903][ T1909] xt_ecn: cannot match TCP bits for non-tcp packets [ 983.341461][ T1908] netlink: 'syz.0.7239': attribute type 19 has an invalid length. [ 983.965972][ T1902] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 984.007032][ T1925] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 984.400968][ T1949] syzkaller0: entered promiscuous mode [ 984.411486][ T1949] syzkaller0: entered allmulticast mode [ 985.028443][ T1972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7257'. [ 985.329660][ T1982] openvswitch: netlink: IP tunnel dst address not specified [ 985.772181][ T1987] netlink: 'syz.4.7260': attribute type 1 has an invalid length. [ 985.828378][ T1987] bond8: entered promiscuous mode [ 985.836502][ T1987] 8021q: adding VLAN 0 to HW filter on device bond8 [ 985.852891][ T1987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7260'. [ 985.862167][ T1987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7260'. [ 986.615772][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7261'. [ 986.637134][ T1993] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 986.858276][ T1940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.313907][ T2002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7265'. [ 987.388974][ T2002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7265'. [ 987.474031][ T2002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7265'. [ 987.537701][ T2002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7265'. [ 988.260310][ T2031] xt_TCPMSS: Only works on TCP SYN packets [ 988.554209][ T2042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7278'. [ 988.619328][ T2047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7279'. [ 988.648982][ T2047] netlink: 'syz.4.7279': attribute type 1 has an invalid length. [ 988.676392][ T2047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7279'. [ 988.679882][ T2045] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048) [ 989.370959][ T2066] Cannot find set identified by id 65534 to match [ 989.423519][ T2067] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 989.754001][ T2080] xt_TPROXY: Can be used only with -p tcp or -p udp [ 990.030097][ T2089] netlink: 'syz.4.7295': attribute type 11 has an invalid length. [ 990.376115][ T2099] netlink: 'syz.4.7297': attribute type 11 has an invalid length. [ 990.502866][ T2104] siw: device registration error -23 [ 991.440159][ T2133] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 991.867451][ T2151] netlink: 'syz.1.7312': attribute type 7 has an invalid length. [ 991.867654][ T2152] netlink: 'syz.1.7312': attribute type 7 has an invalid length. [ 992.224502][ T2151] netlink: 'syz.1.7312': attribute type 7 has an invalid length. [ 992.269239][ T2160] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 992.379160][ T2152] netlink: 'syz.1.7312': attribute type 7 has an invalid length. [ 992.773635][ T2168] batadv0: entered promiscuous mode [ 992.806102][ T2168] macsec1: entered promiscuous mode [ 992.831886][ T2168] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 992.889490][ T2168] batadv0: left promiscuous mode [ 993.205452][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 993.417492][ T2184] __nla_validate_parse: 1 callbacks suppressed [ 993.417512][ T2184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7321'. [ 993.463790][ T2183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7320'. [ 993.509983][ T2183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7320'. [ 993.532112][ T2185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7321'. [ 993.544442][ T2187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7320'. [ 993.621408][ T2185] openvswitch: netlink: Missing key (keys=40, expected=100) [ 994.113595][ T2200] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7324'. [ 994.220352][ T2203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7325'. [ 994.261410][ T2203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7325'. [ 994.419296][ T2190] bridge0: port 3(syz_tun) entered disabled state [ 994.484863][ T2190] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.148629][ T2190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.233070][ T2190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.445176][ T2190] tipc: Resetting bearer [ 995.870256][ T2191] lo speed is unknown, defaulting to 1000 [ 995.871707][ T2195] rB: renamed from lo [ 995.989605][ T2194] geneve3: entered promiscuous mode [ 996.010379][ T2194] geneve3: entered allmulticast mode [ 996.066140][ T14] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.101741][ T14] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.132179][ T14] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 996.174711][ T14] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.215872][ T14] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.232232][ T14] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 996.281141][ T2191] rB speed is unknown, defaulting to 1000 [ 996.339736][ T14] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.383373][ T14] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.429650][ T14] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 996.438961][ T2226] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7327'. [ 996.464252][ T2191] rB speed is unknown, defaulting to 1000 [ 996.488981][ T2191] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 996.534235][ T2191] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 996.615938][ T2191] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 996.760186][ T14] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.804837][ T14] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.819091][ T2191] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 996.841104][ T14] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 996.960278][ T2191] rB speed is unknown, defaulting to 1000 [ 996.998973][ T2191] rB speed is unknown, defaulting to 1000 [ 997.015855][ T2191] rB speed is unknown, defaulting to 1000 [ 997.026373][ T2191] rB speed is unknown, defaulting to 1000 [ 997.082075][ T2191] rB speed is unknown, defaulting to 1000 [ 997.096738][ T2191] rB speed is unknown, defaulting to 1000 [ 997.106750][ T2191] rB speed is unknown, defaulting to 1000 [ 997.122179][ T2191] rB speed is unknown, defaulting to 1000 [ 997.199827][ T2191] rB speed is unknown, defaulting to 1000 [ 997.264085][ T2191] rB speed is unknown, defaulting to 1000 [ 998.159382][ T2273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.236932][ T2277] syzkaller0: entered promiscuous mode [ 998.246794][ T2277] syzkaller0: entered allmulticast mode [ 998.440581][ T2285] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7343'. [ 998.670986][ T2289] 8021q: adding VLAN 0 to HW filter on device bond9 [ 998.680928][ T2289] bond0: (slave bond9): Enslaving as an active interface with an up link [ 999.347789][ T2304] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7348'. [ 999.603779][ T2313] netlink: 'syz.4.7350': attribute type 15 has an invalid length. [ 999.635220][ T2313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7350'. [ 999.646501][ T2313] netlink: 'syz.4.7350': attribute type 15 has an invalid length. [ 999.656420][ T2313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7350'. [ 1000.690299][ T2351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7363'. [ 1001.863125][ T2389] netlink: 'syz.3.7372': attribute type 1 has an invalid length. [ 1002.155653][ T2389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1002.753278][ T2423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1002.789555][ T2416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7378'. [ 1002.834279][ T2423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1003.195785][ T2441] netlink: 'syz.2.7384': attribute type 10 has an invalid length. [ 1003.406631][ T2441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.424158][ T2441] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1003.863559][ T2460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7387'. [ 1003.933617][ T2460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7387'. [ 1004.358290][ T2466] veth0: entered promiscuous mode [ 1004.418293][ T2470] veth0: left promiscuous mode [ 1004.443508][ T2466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7388'. [ 1004.461146][ T2473] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1004.471897][ T2473] bridge2: entered promiscuous mode [ 1004.498585][ T2473] bridge2: entered allmulticast mode [ 1004.551544][ T2476] netlink: 'syz.0.7388': attribute type 10 has an invalid length. [ 1004.770862][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.779774][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.791362][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.820618][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.184282][ T2490] netlink: 'syz.1.7394': attribute type 21 has an invalid length. [ 1005.206413][ T2490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1005.301472][ T2493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7396'. [ 1005.377951][ T2493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.434673][ T2497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7395'. [ 1005.541797][ T2497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7395'. [ 1005.578541][ T1157] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.594017][ T2497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7395'. [ 1005.616890][ T1157] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.661874][ T1157] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.351449][ T1157] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.481440][ T2537] syzkaller0: entered promiscuous mode [ 1006.513460][ T2537] syzkaller0: entered allmulticast mode [ 1007.403728][ T2573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1007.501352][ T2576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7412'. [ 1007.900548][ T2591] syzkaller0: entered promiscuous mode [ 1007.950440][ T2591] syzkaller0: entered allmulticast mode [ 1008.983914][T27659] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.003226][ T2636] __nla_validate_parse: 4 callbacks suppressed [ 1009.003271][ T2636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7425'. [ 1009.043371][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.079566][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.114023][ T2636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7425'. [ 1009.137800][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.647280][ T2663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7432'. [ 1009.977241][ T2683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7434'. [ 1010.090158][ T2682] netlink: 'syz.0.7435': attribute type 7 has an invalid length. [ 1010.160108][ T2690] netlink: zone id is out of range [ 1010.218727][ T2690] netlink: 'syz.2.7437': attribute type 24 has an invalid length. [ 1010.305237][ T2690] netlink: zone id is out of range [ 1010.357197][ T2690] netlink: zone id is out of range [ 1010.369998][ T2700] veth1_to_bond: entered allmulticast mode [ 1010.379945][ T2690] netlink: zone id is out of range [ 1010.386558][ T2700] veth1_to_bond: entered promiscuous mode [ 1010.394000][ T2690] netlink: zone id is out of range [ 1010.407829][ T2700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1010.420472][ T2690] netlink: zone id is out of range [ 1010.433918][ T2702] xt_hashlimit: max too large, truncated to 1048576 [ 1010.441066][ T2690] netlink: zone id is out of range [ 1010.460617][ T2690] netlink: zone id is out of range [ 1010.470021][ T2702] No such timeout policy "syz1" [ 1010.484317][ T2690] netlink: zone id is out of range [ 1010.523275][ T2700] veth1_to_bond (unregistering): left allmulticast mode [ 1010.555605][ T2700] veth1_to_bond (unregistering): left promiscuous mode [ 1010.599976][ T2700] bond0: (slave bond_slave_1): Releasing backup interface [ 1010.835494][ T2705] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1011.008070][ T2713] netlink: 'syz.3.7443': attribute type 3 has an invalid length. [ 1011.367041][ T2733] netlink: 'syz.0.7447': attribute type 1 has an invalid length. [ 1011.403223][ T2733] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7447'. [ 1011.457781][ T2733] netlink: 'syz.0.7447': attribute type 1 has an invalid length. [ 1011.799396][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7449'. [ 1011.860405][ T2742] netlink: 'syz.4.7449': attribute type 29 has an invalid length. [ 1011.895212][ T2747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7449'. [ 1011.954687][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7449'. [ 1012.009635][ T2747] netlink: 'syz.4.7449': attribute type 29 has an invalid length. [ 1012.717782][ T2778] syzkaller1: entered promiscuous mode [ 1012.734852][ T2778] syzkaller1: entered allmulticast mode [ 1012.786380][ T2785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.165400][ T2805] netlink: 'syz.0.7465': attribute type 12 has an invalid length. [ 1015.549884][ T2777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1016.084996][ T2831] __nla_validate_parse: 3 callbacks suppressed [ 1016.085017][ T2831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7470'. [ 1016.606558][ T2862] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7473'. [ 1016.933198][ T2889] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7482'. [ 1016.952233][ T2890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1016.990158][ T2890] netlink: 'syz.4.7481': attribute type 10 has an invalid length. [ 1017.040680][ T2890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1017.176539][ T2890] geneve4: entered promiscuous mode [ 1017.228758][ T2890] geneve4: entered allmulticast mode [ 1017.795430][ T2912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7487'. [ 1017.928112][ T2912] IPv6: sit1: Disabled Multicast RS [ 1017.953405][ T2917] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7489'. [ 1017.960890][ T2912] sit1: entered allmulticast mode [ 1018.116229][ T2921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7489'. [ 1018.130619][ T2917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7489'. [ 1018.232204][ T2930] openvswitch: netlink: IP tunnel dst address not specified [ 1018.701542][ T2939] netlink: 'syz.3.7494': attribute type 1 has an invalid length. [ 1018.925726][ T2939] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1018.988265][ T2948] x_tables: duplicate underflow at hook 1 [ 1019.297326][ T2962] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1019.461794][ T2968] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1019.500727][T28855] IPVS: starting estimator thread 0... [ 1019.633484][ T2970] IPVS: using max 31 ests per chain, 74400 per kthread [ 1019.646480][ T2973] ip_vti0: Master is either lo or non-ether device [ 1019.656889][ T2974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7504'. [ 1019.722764][ T2973] xt_hashlimit: size too large, truncated to 1048576 [ 1019.774775][ T2978] openvswitch: netlink: IP tunnel dst address not specified [ 1019.799673][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.818123][T11113] tipc: Subscription rejected, illegal request [ 1019.984243][ T2975] bridge_slave_0 (unregistering): left allmulticast mode [ 1020.028631][ T2975] bridge_slave_0 (unregistering): left promiscuous mode [ 1020.104111][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.505784][ T3030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7517'. [ 1022.008600][ T3047] openvswitch: netlink: IP tunnel dst address not specified [ 1022.217749][ T3054] netlink: 'syz.2.7526': attribute type 1 has an invalid length. [ 1022.333706][ T3055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1022.339753][ T3054] bond2: entered promiscuous mode [ 1022.349841][ T3054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1022.472449][ T3055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1022.535066][ T3054] bond2: (slave bridge3): making interface the new active one [ 1022.570335][ T3054] bridge3: entered promiscuous mode [ 1022.621030][ T3054] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1023.020365][ T3071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7528'. [ 1023.301632][ T3082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7533'. [ 1023.347541][ T3083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.427404][ T3071] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1024.391434][T27652] pimreg3: left allmulticast mode [ 1024.580081][ T3128] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1024.907573][ T3134] netlink: 'syz.4.7548': attribute type 23 has an invalid length. [ 1025.308679][T27652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.323789][T27652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.338965][T27652] bond0 (unregistering): (slave bond5): Releasing backup interface [ 1025.349659][T27652] bond0 (unregistering): Released all slaves [ 1025.370802][T27652] bond1 (unregistering): Released all slaves [ 1025.394014][T27652] bond2 (unregistering): Released all slaves [ 1025.425689][T27652] bond3 (unregistering): Released all slaves [ 1025.449145][T27652] bond4 (unregistering): Released all slaves [ 1025.480420][T27652] bond5 (unregistering): Released all slaves [ 1025.508101][T27652] bond6 (unregistering): Released all slaves [ 1025.554552][T27652] bond7 (unregistering): Released all slaves [ 1025.576118][T27652] bond8 (unregistering): Released all slaves [ 1025.619993][T27652] bond9 (unregistering): Released all slaves [ 1025.645850][T27652] bond10 (unregistering): Released all slaves [ 1025.686864][T27652] bond11 (unregistering): Released all slaves [ 1025.728548][T27652] bond12 (unregistering): Released all slaves [ 1026.206694][T27652] tipc: Left network mode [ 1026.464916][ T3144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1027.036589][ T30] audit: type=1107 audit(1783123233.054:17): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>t>C[Ji3.{QоTDJ9־sݻ\Zk35Ue>G]&Sw#G&-J%eMr3XZef3|}T,B' [ 1027.388933][ T3169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7559'. [ 1027.640117][ T3170] veth0: entered promiscuous mode [ 1027.803029][ T3170] veth0: left promiscuous mode [ 1027.885360][ T3180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7560'. [ 1027.955225][ T3177] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1027.995030][ T3183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1028.002466][ T3183] IPv6: NLM_F_CREATE should be set when creating new route [ 1028.009748][ T3183] IPv6: NLM_F_CREATE should be set when creating new route [ 1028.030012][ T3180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7560'. [ 1028.056886][ T3186] bond0: Caught tx_queue_len zero misconfig [ 1028.347498][ T3195] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7564'. [ 1028.369463][ T3200] netlink: 'syz.1.7565': attribute type 2 has an invalid length. [ 1028.430655][ T3200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7565'. [ 1028.597775][ T3200] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7565'. [ 1028.924586][ T3208] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 1028.939104][ T3220] netlink: 'syz.0.7569': attribute type 11 has an invalid length. [ 1028.949532][ T3220] netlink: 'syz.0.7569': attribute type 11 has an invalid length. [ 1028.970213][ T3220] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7569'. [ 1028.991628][T27652] hsr_slave_0: left promiscuous mode [ 1029.016518][T27652] hsr_slave_1: left promiscuous mode [ 1029.029291][T27652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.041527][ T3223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7571'. [ 1029.063569][T27652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.090175][T27652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.099141][T27652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.151136][T27652] veth1_macvtap: left promiscuous mode [ 1029.158627][T27652] veth0_macvtap: left promiscuous mode [ 1030.033852][ T3252] Cannot find del_set index 3 as target [ 1030.459349][ T3225] syzkaller0: entered promiscuous mode [ 1030.482797][ T3225] syzkaller0: entered allmulticast mode [ 1030.765548][ T3246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1031.400193][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7582'. [ 1031.488794][ T3276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1031.558203][ T3279] netlink: 'syz.1.7580': attribute type 1 has an invalid length. [ 1031.608475][ T3276] bridge4: entered promiscuous mode [ 1031.610534][ T3279] netlink: 756 bytes leftover after parsing attributes in process `syz.1.7580'. [ 1031.682972][ T3276] bridge4: entered allmulticast mode [ 1032.402106][ T3294] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7586'. [ 1032.483409][ T3299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7586'. [ 1032.780450][ T3312] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7591'. [ 1032.840590][ T3315] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7591'. [ 1033.090771][ T3327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7595'. [ 1033.173805][ T3330] Cannot find set identified by id 65534 to match [ 1033.203735][ T3327] macsec0: left allmulticast mode [ 1033.298272][ T3332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7597'. [ 1034.464358][ T3373] veth0: entered promiscuous mode [ 1034.525317][ T3368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7606'. [ 1034.536848][ T3375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1034.579330][ T3368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7606'. [ 1034.648541][ T3368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7606'. [ 1034.821540][ T3389] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1035.296682][ T3372] veth0: left promiscuous mode [ 1035.661183][ T3409] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1035.708763][ T3409] batman_adv: batadv0: Adding interface: gretap1 [ 1035.736712][ T3409] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.801839][ T3409] batman_adv: batadv0: Interface activated: gretap1 [ 1035.809664][ T3414] netlink: 'syz.0.7620': attribute type 1 has an invalid length. [ 1035.819238][ T3414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.670748][ T3447] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1036.690665][ T3447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1037.172975][ T3363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1037.664077][ T3462] syzkaller0: entered promiscuous mode [ 1037.701510][ T3462] syzkaller0: entered allmulticast mode [ 1037.936717][ T3478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7640'. [ 1038.214703][ T3478] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7640'. [ 1038.677681][ T3497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1038.769672][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1038.802118][ T3497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1038.841552][ T3504] netlink: 'syz.4.7646': attribute type 1 has an invalid length. [ 1038.881172][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1039.510107][ T3504] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1040.024283][ T3531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7648'. [ 1040.152178][ T3536] syzkaller0: entered promiscuous mode [ 1040.185644][ T3536] syzkaller0: entered allmulticast mode [ 1040.778767][ T3566] ipt_ECN: cannot use operation on non-tcp rule [ 1041.188174][ T3569] netlink: 'syz.0.7658': attribute type 21 has an invalid length. [ 1041.220704][ T3569] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7658'. [ 1041.393234][ T3571] bond5: Unable to set up delay as MII monitoring is disabled [ 1041.418397][T28838] IPVS: starting estimator thread 0... [ 1041.461174][ T3571] bond5 (unregistering): Released all slaves [ 1041.565624][ T3579] IPVS: using max 27 ests per chain, 64800 per kthread [ 1041.588990][ T3585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7661'. [ 1041.601263][ T3569] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7658'. [ 1041.624639][ T3585] ipt_rpfilter: unknown options [ 1042.098106][ T30] audit: type=1804 audit(1783123248.134:18): pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7664" name="/newroot/256/cgroup.controllers" dev="tmpfs" ino=1321 res=1 errno=0 [ 1042.276495][ T30] audit: type=1800 audit(1783123248.164:19): pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7664" name="cgroup.controllers" dev="tmpfs" ino=1321 res=0 errno=0 [ 1042.447813][ T3603] tipc: Enabling of bearer rejected, failed to enable media [ 1043.261247][ T3606] bond5: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 1043.279773][ T3606] bond5: (slave ip6_vti0): Error -95 calling set_mac_address [ 1043.346682][ T3618] bridge_slave_1: left allmulticast mode [ 1043.363708][ T3618] bridge_slave_1: left promiscuous mode [ 1043.369603][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.387223][ T3618] bond0: (slave bond_slave_0): Releasing backup interface [ 1043.406937][ T3618] bond0: (slave bond_slave_1): Releasing backup interface [ 1043.435895][ T3618] team0: Port device team_slave_0 removed [ 1043.463201][ T3618] team0: Port device team_slave_1 removed [ 1043.470238][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.480050][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.489995][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.499629][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.510902][ T3618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1043.655360][ T3630] tipc: Started in network mode [ 1043.666237][ T3630] tipc: Node identity e23f264dffcd, cluster identity 4711 [ 1043.684932][ T3630] tipc: Enabled bearer , priority 0 [ 1043.892129][ T3632] syzkaller0: entered promiscuous mode [ 1043.899045][ T3632] syzkaller0: entered allmulticast mode [ 1043.906719][ T3632] tipc: Resetting bearer [ 1043.918496][ T3600] tipc: Resetting bearer [ 1048.559737][ T3600] tipc: Disabling bearer [ 1048.698685][ T3651] syzkaller0: entered promiscuous mode [ 1048.727517][ T3651] syzkaller0: entered allmulticast mode [ 1048.781218][ T2176] tipc: Node number set to 502408781 [ 1049.017482][ T3669] __nla_validate_parse: 1 callbacks suppressed [ 1049.017502][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7682'. [ 1049.379493][ T3679] veth0: entered promiscuous mode [ 1049.401821][ T3680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7683'. [ 1049.421278][ T3679] netlink: 'syz.1.7685': attribute type 32 has an invalid length. [ 1049.429989][ T3680] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1049.498515][ T3679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1049.560109][ T3679] bond6: option coupled_control: invalid value (3) [ 1049.570199][ T3679] bond6 (unregistering): Released all slaves [ 1049.604014][ T3663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1049.610205][ T3663] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1049.630004][ T3663] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1049.661529][ T3663] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1049.737037][ T3678] veth0: left promiscuous mode [ 1049.819147][ T3663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1049.878099][ T3663] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1049.930691][ T3663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1049.940898][ T3699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.952061][ T3663] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1049.981484][ T3699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7690'. [ 1050.267317][ T3711] netlink: 596 bytes leftover after parsing attributes in process `syz.1.7693'. [ 1050.618717][ T3721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7695'. [ 1051.072153][ T3737] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1051.334157][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7702'. [ 1051.405880][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7702'. [ 1051.714810][ T3755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7705'. [ 1051.745045][ T3755] netlink: 'syz.0.7705': attribute type 7 has an invalid length. [ 1051.794860][ T3755] netlink: 'syz.0.7705': attribute type 8 has an invalid length. [ 1051.804256][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7705'. [ 1051.806967][ T3757] vlan3: entered promiscuous mode [ 1051.846573][ T3757] geneve1: entered promiscuous mode [ 1051.873272][ T3757] vlan3: entered allmulticast mode [ 1051.883990][ T3757] geneve1: entered allmulticast mode [ 1052.423233][ T3775] netlink: 'syz.1.7711': attribute type 1 has an invalid length. [ 1052.679491][ T3775] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1052.777249][ T3777] syzkaller0: entered promiscuous mode [ 1052.830928][ T3777] syzkaller0: entered allmulticast mode [ 1053.060922][ T3799] lo: entered allmulticast mode [ 1053.350824][ T3790] syzkaller0: entered promiscuous mode [ 1053.369847][ T3790] syzkaller0: entered allmulticast mode [ 1054.137383][ T3792] netlink: 'syz.4.7718': attribute type 4 has an invalid length. [ 1054.637485][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1054.701147][ T3826] __nla_validate_parse: 4 callbacks suppressed [ 1054.701198][ T3826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7726'. [ 1058.570291][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7718'. [ 1058.960782][ T3834] ip6_vti0: entered promiscuous mode [ 1059.073433][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7726'. [ 1059.669547][ T3863] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7734'. [ 1060.266462][ T3877] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1060.287100][ T3877] bond6 (unregistering): Released all slaves [ 1060.444561][ T3881] syzkaller0: entered promiscuous mode [ 1060.459864][ T3881] syzkaller0: entered allmulticast mode [ 1061.007238][ T3897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7741'. [ 1061.165865][ T3897] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7741'. [ 1061.181926][ T3902] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7746'. [ 1061.432216][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7747'. [ 1061.443185][ T3913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7749'. [ 1062.527950][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7758'. [ 1062.698641][ T3949] bond11: (slave ip6gretap2): making interface the new active one [ 1062.745157][ T3949] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1062.789862][ T3949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7758'. [ 1062.881573][ T3962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7763'. [ 1063.217524][ T3977] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7767'. [ 1063.244561][ T3977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7767'. [ 1063.334751][ T3969] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1063.877178][ T3984] bond12: option xmit_hash_policy: invalid value (64) [ 1063.898397][ T30] audit: type=1800 audit(1783123269.934:20): pid=4004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7770" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=736 res=0 errno=0 [ 1063.951759][ T3984] bond12 (unregistering): Released all slaves [ 1064.438390][ T4015] netlink: 'syz.3.7774': attribute type 12 has an invalid length. [ 1064.462019][ T4015] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1070.459389][ T4035] xfrm1: entered promiscuous mode [ 1070.499619][ T4035] xfrm1: entered allmulticast mode [ 1070.676029][ T4065] __nla_validate_parse: 4 callbacks suppressed [ 1070.676075][ T4065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7781'. [ 1070.961312][ T4074] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7784'. [ 1071.167587][ T4076] syzkaller0: entered promiscuous mode [ 1071.183689][ T4076] syzkaller0: entered allmulticast mode [ 1071.306905][ T4087] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7788'. [ 1072.495151][ T4124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7800'. [ 1072.640627][ T4127] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1072.987844][ T4133] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1073.077203][ T4137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1073.096075][ T4137] netlink: 'syz.2.7803': attribute type 10 has an invalid length. [ 1073.104609][ T4138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7805'. [ 1073.214989][ T4137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1073.309759][ T4137] geneve2: entered promiscuous mode [ 1073.355452][ T4137] geneve2: entered allmulticast mode [ 1076.198725][ T4214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7818'. [ 1076.263166][ T4214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7818'. [ 1076.559622][ T4227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.639738][ T4229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1077.056463][ T4237] netlink: 'syz.3.7825': attribute type 13 has an invalid length. [ 1077.065639][ T4243] netlink: 'syz.1.7826': attribute type 9 has an invalid length. [ 1077.479877][ T4260] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7829'. [ 1077.829866][ T4265] netlink: 'syz.4.7830': attribute type 1 has an invalid length. [ 1078.174681][ T4278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7832'. [ 1078.637322][ T4294] netlink: 'syz.3.7838': attribute type 29 has an invalid length. [ 1078.996579][ T4302] bond0: Error: Cannot enslave bond to itself. [ 1079.061618][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1079.123371][ T4306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1079.311834][ T4318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7845'. [ 1079.319785][ T4308] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1079.341794][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1079.396889][ T4306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1079.501289][ T4306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1079.780862][ T4329] tunl0: entered promiscuous mode [ 1079.811831][ T4329] netlink: 'syz.4.7848': attribute type 3 has an invalid length. [ 1081.874917][ T4379] IPVS: length: 8 != 1152 [ 1081.928412][ T4379] sctp: [Deprecated]: syz.4.7861 (pid 4379) Use of int in max_burst socket option. [ 1081.928412][ T4379] Use struct sctp_assoc_value instead [ 1082.683856][ T4408] netlink: 'syz.1.7869': attribute type 1 has an invalid length. [ 1082.694391][ T4410] __nla_validate_parse: 3 callbacks suppressed [ 1082.694424][ T4410] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7871'. [ 1082.798494][ T4408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1082.894040][ T4413] bond6: (slave gretap2): making interface the new active one [ 1082.904568][ T4413] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 1083.130902][ T4427] netlink: 'syz.4.7874': attribute type 4 has an invalid length. [ 1084.116847][ T4434] netlink: 'syz.4.7876': attribute type 25 has an invalid length. [ 1084.147804][ T4434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1084.205074][ T4440] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7879'. [ 1084.227608][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7878'. [ 1084.314337][ T4439] team0: entered promiscuous mode [ 1084.346304][ T4439] team_slave_0: entered promiscuous mode [ 1084.365007][ T4439] team_slave_1: entered promiscuous mode [ 1084.413660][ T4439] team0: left promiscuous mode [ 1084.429725][ T4439] team_slave_0: left promiscuous mode [ 1084.448332][ T4439] team_slave_1: left promiscuous mode [ 1084.590836][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7880'. [ 1084.701308][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7880'. [ 1085.120632][ T4455] syzkaller0: entered promiscuous mode [ 1085.155200][ T4455] syzkaller0: entered allmulticast mode [ 1085.355506][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1085.610813][ T4483] netlink: 'syz.3.7887': attribute type 1 has an invalid length. [ 1086.020224][ T4497] nbd: must specify an index to disconnect [ 1086.135206][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7894'. [ 1086.155697][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1086.172602][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1086.187639][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7894'. [ 1086.223722][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7894'. [ 1086.600005][ T4514] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 1086.933687][ T4525] tipc: Failed to remove unknown binding: 66,0,0/502408781:3852556771/3852556772 [ 1086.984802][ T4525] tipc: Failed to remove unknown binding: 66,0,0/502408781:3852556771/3852556772 [ 1087.003372][ T4528] netlink: 'syz.0.7904': attribute type 1 has an invalid length. [ 1087.039042][ T4526] syzkaller0: entered promiscuous mode [ 1087.067716][ T4526] syzkaller0: entered allmulticast mode [ 1087.149586][ T4530] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1087.712420][ T4541] syzkaller0: entered promiscuous mode [ 1087.742886][ T4541] syzkaller0: entered allmulticast mode [ 1087.863442][ T4549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1087.978666][ T4561] __nla_validate_parse: 8 callbacks suppressed [ 1087.978688][ T4561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7911'. [ 1088.040324][ T4561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7911'. [ 1088.196708][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7910'. [ 1093.983989][ T4577] netlink: 'syz.1.7914': attribute type 10 has an invalid length. [ 1094.112888][ T4577] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1094.296419][ T4588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.611993][ T4592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1094.657419][ T4594] syzkaller0: entered promiscuous mode [ 1094.673830][ T4594] syzkaller0: entered allmulticast mode [ 1095.583864][ T4626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7930'. [ 1095.984021][ T4642] gtp1: entered allmulticast mode [ 1096.037501][ T4642] team0: Device gtp1 is of different type [ 1096.441716][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7937'. [ 1096.487894][ T4663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7937'. [ 1096.511875][ T4665] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7938'. [ 1096.524898][ T4663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7937'. [ 1096.542040][ T4663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7937'. [ 1097.033916][ T4680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7940'. [ 1097.043637][ T4679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7941'. [ 1097.118157][ T4679] tunl0: Caught tx_queue_len zero misconfig [ 1097.309508][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7941'. [ 1098.041686][ T4691]  speed is unknown, defaulting to 1000 [ 1098.430763][ T4712] netlink: 'syz.4.7950': attribute type 12 has an invalid length. [ 1099.346706][ T4735] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1100.058896][ T4754] __nla_validate_parse: 4 callbacks suppressed [ 1100.059176][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7963'. [ 1100.095748][ T4691] lo speed is unknown, defaulting to 1000 [ 1100.129051][ T4691] rB speed is unknown, defaulting to 1000 [ 1100.637030][ T4767] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1100.718981][ T4770] netlink: 'syz.0.7966': attribute type 4 has an invalid length. [ 1100.994310][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7970'. [ 1101.049960][ T4776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7970'. [ 1101.165168][ T4776] veth5: entered promiscuous mode [ 1101.270516][ T4784] netlink: 'syz.0.7973': attribute type 11 has an invalid length. [ 1101.807893][ T4794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7975'. [ 1102.075649][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1102.294395][ T4811] hsr0: entered allmulticast mode [ 1102.321869][ T4811] hsr_slave_0: entered allmulticast mode [ 1102.351483][ T4811] hsr_slave_1: entered allmulticast mode [ 1103.021950][ T4830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1103.073639][ T4830] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1103.264790][ T4836] IPVS: length: 106 != 8 [ 1103.559764][ T4837] syzkaller0: entered promiscuous mode [ 1103.644671][ T4837] syzkaller0: entered allmulticast mode [ 1103.750281][ T4850] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 1103.887294][ T4857] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7991'. [ 1104.054869][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7991'. [ 1104.421292][ T4872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7997'. [ 1105.591382][ T4882] Bluetooth: MGMT ver 1.23 [ 1108.463148][ T4861] ip6tnl0: Caught tx_queue_len zero misconfig [ 1108.471042][ T4859] syzkaller1: entered promiscuous mode [ 1108.478422][ T4859] syzkaller1: entered allmulticast mode [ 1109.060660][ T4900] syzkaller0: entered promiscuous mode [ 1109.083285][ T4900] syzkaller0: entered allmulticast mode [ 1109.385307][ T4905] __nla_validate_parse: 1 callbacks suppressed [ 1109.385338][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1109.801656][ T4920] netlink: 'syz.4.8009': attribute type 2 has an invalid length. [ 1111.198315][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8016'. [ 1111.398237][ T4975] syzkaller0: entered promiscuous mode [ 1111.427141][ T4975] syzkaller0: entered allmulticast mode [ 1111.605041][ T4987] Cannot find del_set index 4 as target [ 1111.744399][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1111.774426][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1111.964037][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1112.827252][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8028'. [ 1112.998963][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8028'. [ 1113.575765][ T5033] ip6erspan0: mtu less than device minimum [ 1114.259831][ T5061] IPVS: length: 153 != 24 [ 1114.305472][ T5062] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8036'. [ 1114.530738][ T5054] syzkaller0: entered promiscuous mode [ 1114.566677][ T5054] syzkaller0: entered allmulticast mode [ 1114.637617][ T5066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8039'. [ 1114.670440][ T5068] netlink: 'syz.1.8038': attribute type 39 has an invalid length. [ 1114.734683][ T5068] hsr_slave_0: left promiscuous mode [ 1114.741292][ T5068] hsr_slave_1: left promiscuous mode [ 1115.258204][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8043'. [ 1115.427477][ T5091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8043'. [ 1115.464758][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8043'. [ 1115.547296][ T5088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.621250][ T5091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8043'. [ 1115.853905][ T5107] sctp: [Deprecated]: syz.2.8049 (pid 5107) Use of int in max_burst socket option deprecated. [ 1115.853905][ T5107] Use struct sctp_assoc_value instead [ 1116.996642][ T5126] syzkaller0: entered promiscuous mode [ 1117.019677][ T5126] syzkaller0: entered allmulticast mode [ 1117.892014][ T5159] netlink: 'syz.3.8061': attribute type 12 has an invalid length. [ 1117.981531][ T5154] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1118.012097][ T5154] bond12 (unregistering): Released all slaves [ 1118.286825][ T5165] netlink: 'syz.2.8063': attribute type 1 has an invalid length. [ 1118.349209][ T5165] netlink: 756 bytes leftover after parsing attributes in process `syz.2.8063'. [ 1118.595871][ T5177] IPVS: set_ctl: invalid protocol: 255 172.20.20.68:20001 [ 1118.726922][ T5175] gretap0: entered promiscuous mode [ 1118.757159][ T5175] vlan2: entered promiscuous mode [ 1118.974677][ T5183] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1119.052791][ T5183] bond3 (unregistering): Released all slaves [ 1119.364450][ T5186] syzkaller0: entered promiscuous mode [ 1119.400063][ T5186] syzkaller0: entered allmulticast mode [ 1119.564642][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8071'. [ 1119.576371][ T5191] netlink: 'syz.2.8071': attribute type 10 has an invalid length. [ 1119.611375][ T5191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8071'. [ 1119.649193][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8070'. [ 1119.734559][ T5195] netlink: 'syz.1.8073': attribute type 1 has an invalid length. [ 1120.053464][ T5204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8073'. [ 1120.154881][ T5195] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1120.686490][ T5229] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8080'. [ 1120.940485][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8082'. [ 1120.972087][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8082'. [ 1121.466015][ T5259] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1121.563560][ T5265] syzkaller0: entered promiscuous mode [ 1121.582897][ T5265] syzkaller0: entered allmulticast mode [ 1121.967617][ T5272] xfrm0: Caught tx_queue_len zero misconfig [ 1122.258431][ T5293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1122.327348][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1122.975664][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1123.009868][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1123.093495][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8096'. [ 1123.106783][ T5310] netlink: 'syz.0.8095': attribute type 1 has an invalid length. [ 1123.523343][ T5323] netlink: 'syz.1.8100': attribute type 1 has an invalid length. [ 1123.848615][ T5331] bond8 (unregistering): Released all slaves [ 1123.908094][ T5338] bond4: (slave 26rB): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1123.938915][ T5338] bond4: (slave 26rB): Enslaving as an active interface with an up link [ 1124.024487][ T5338] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1124.113388][ T5339] gtp0: entered allmulticast mode [ 1124.139177][ T5343] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1124.198327][ T5339] gtp0: entered promiscuous mode [ 1124.219864][ T5339] team0: Device gtp0 is of different type [ 1124.349778][ T2176] rB speed is unknown, defaulting to 1000 [ 1124.357334][T28849] rB speed is unknown, defaulting to 1000 [ 1124.385728][T28849] sy2: Port: 1 Link ACTIVE [ 1124.791873][ T5364] __nla_validate_parse: 4 callbacks suppressed [ 1124.791893][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8111'. [ 1124.894044][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8112'. [ 1124.999876][ T5373] pimreg: entered allmulticast mode [ 1125.031925][ T5375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8114'. [ 1125.111169][ T5375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8114'. [ 1125.236561][ T5380] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8115'. [ 1126.718075][ T5454] macvtap0: entered allmulticast mode [ 1126.773806][ T5454] veth0_macvtap: entered allmulticast mode [ 1127.432122][ T5484] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.8129'. [ 1128.704028][ T5537] netlink: 'syz.2.8135': attribute type 1 has an invalid length. [ 1128.855782][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1129.171513][ T5537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1129.217706][ T5546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1129.474770][ T5552] hsr_slave_1 (unregistering): left promiscuous mode [ 1129.620888][ T30] audit: type=1107 audit(1783123335.634:21): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1129.713375][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8139'. [ 1130.610842][ T5592] bond0: entered promiscuous mode [ 1130.679595][ T5592] bond_slave_0: entered promiscuous mode [ 1130.725218][ T5592] bond_slave_1: entered promiscuous mode [ 1130.767452][ T5592] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1130.845246][ T5592] batadv0: entered promiscuous mode [ 1130.861054][ T5592] debugfs: 'hsr1' already exists in 'hsr' [ 1130.868253][ T5592] Cannot create hsr debugfs directory [ 1131.022632][ T5592] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1131.089383][ T5592] bond0: left promiscuous mode [ 1131.113654][ T5592] bond_slave_0: left promiscuous mode [ 1131.120138][ T5592] bond_slave_1: left promiscuous mode [ 1131.127079][ T5592] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1131.155570][ T5592] batadv0: left promiscuous mode [ 1131.783734][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8149'. [ 1131.882001][ T5623] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8146'. [ 1131.893102][ T5623] ip6gre0: Caught tx_queue_len zero misconfig [ 1131.920566][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8151'. [ 1131.941638][ T5624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8150'. [ 1131.958121][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8151'. [ 1132.014549][ T5632] netlink: 'syz.3.8151': attribute type 24 has an invalid length. [ 1132.345409][ T5638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8152'. [ 1132.444631][ T5643] tunl0: left promiscuous mode [ 1132.511819][ T5643] veth0_macvtap: left allmulticast mode [ 1132.580891][ T5643] macvtap0: left allmulticast mode [ 1132.592195][ T5643] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1132.642763][ T5659] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1132.680961][ T5643] vlan2: left allmulticast mode [ 1132.732181][ T5643] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1132.787309][ T5643] xfrm1: left allmulticast mode [ 1132.812792][ T5643] veth5: left promiscuous mode [ 1132.851432][ T5643] vlan3: left promiscuous mode [ 1132.888227][ T5643] bridge0: left promiscuous mode [ 1132.933491][ T5643] gretap1: left promiscuous mode [ 1132.946277][ T5643] veth9: left promiscuous mode [ 1132.971845][ T5643] veth11: left promiscuous mode [ 1132.993664][ T5643] geneve2: left promiscuous mode [ 1133.001177][ T5643] geneve2: left allmulticast mode [ 1133.023668][ T5643] bond8: left promiscuous mode [ 1133.030227][ T5643] geneve3: left promiscuous mode [ 1133.037674][ T5643] geneve3: left allmulticast mode [ 1133.226026][T11113] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.237447][T11113] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1133.275038][T11113] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.300333][T11113] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1133.311162][T11113] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.321248][T11113] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1133.333539][T27653] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.394737][T27653] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1133.653834][ T5680] dvmrp8: entered allmulticast mode [ 1133.907774][ T5684] syzkaller0: entered promiscuous mode [ 1133.936286][ T5684] syzkaller0: entered allmulticast mode [ 1135.127896][ T5740] IPVS: ip_vs_add_dest(): server weight less than zero [ 1135.305571][ T5748] syzkaller0: entered promiscuous mode [ 1135.318045][ T5748] syzkaller0: entered allmulticast mode [ 1135.334723][ T5753] IPVS: Unknown mcast interface: lo [ 1135.367669][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8179'. [ 1135.520296][ T5753] IPv6: sit2: Disabled Multicast RS [ 1135.545737][ T5753] sit2: entered allmulticast mode [ 1135.927463][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8188'. [ 1136.048933][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8186'. [ 1136.064282][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8186'. [ 1136.199336][ T5778] gre0: Master is either lo or non-ether device [ 1136.260538][ T5780] netlink: 'syz.3.8191': attribute type 1 has an invalid length. [ 1136.439796][ T5786] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1136.794131][ T5780] bond7: (slave bridge8): making interface the new active one [ 1136.828068][ T5780] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 1137.434546][ T5826] __nla_validate_parse: 2 callbacks suppressed [ 1137.434569][ T5826] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8197'. [ 1137.669186][ T5834] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8203'. [ 1137.747064][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8203'. [ 1138.417960][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8208'. [ 1139.006109][ T5630] block nbd4: Receive control failed (result -1) [ 1139.015256][ T5630] [ 1139.017634][ T5630] ====================================================== [ 1139.024880][ T5630] WARNING: possible circular locking dependency detected [ 1139.030334][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8212'. [ 1139.032088][ T5630] syzkaller #0 Not tainted [ 1139.032104][ T5630] ------------------------------------------------------ [ 1139.032113][ T5630] kworker/u9:2/5630 is trying to acquire lock: [ 1139.032125][ T5630] ffff888051a18260 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 1139.068317][ T5630] [ 1139.068317][ T5630] but task is already holding lock: [ 1139.075683][ T5630] ffff88823bf00f68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1139.084697][ T5630] [ 1139.084697][ T5630] which lock already depends on the new lock. [ 1139.084697][ T5630] [ 1139.095126][ T5630] [ 1139.095126][ T5630] the existing dependency chain (in reverse order) is: [ 1139.104328][ T5630] [ 1139.104328][ T5630] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1139.111980][ T5630] __mutex_lock+0x19d/0x1550 [ 1139.117365][ T5630] nbd_queue_rq+0x373/0x1150 [ 1139.122488][ T5630] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1139.128691][ T5630] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1139.135616][ T5630] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1139.142156][ T5630] blk_mq_run_work_fn+0x16c/0x300 [ 1139.147813][ T5630] process_scheduled_works+0xa8e/0x14e0 [ 1139.153930][ T5630] worker_thread+0xa47/0xfb0 [ 1139.159048][ T5630] kthread+0x388/0x470 [ 1139.163653][ T5630] ret_from_fork+0x514/0xb70 [ 1139.168796][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1139.174085][ T5630] [ 1139.174085][ T5630] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1139.181390][ T5630] __mutex_lock+0x19d/0x1550 [ 1139.186537][ T5630] nbd_queue_rq+0xc1/0x1150 [ 1139.191585][ T5630] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1139.197658][ T5630] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1139.204525][ T5630] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1139.211054][ T5630] blk_mq_run_work_fn+0x16c/0x300 [ 1139.216603][ T5630] process_scheduled_works+0xa8e/0x14e0 [ 1139.222675][ T5630] worker_thread+0xa47/0xfb0 [ 1139.227797][ T5630] kthread+0x388/0x470 [ 1139.232398][ T5630] ret_from_fork+0x514/0xb70 [ 1139.237530][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1139.242824][ T5630] [ 1139.242824][ T5630] -> #4 (set->srcu){.+.+}-{0:0}: [ 1139.249957][ T5630] __synchronize_srcu+0xc9/0x2f0 [ 1139.255424][ T5630] elevator_switch+0x1e8/0x7b0 [ 1139.260792][ T5630] elevator_change+0x2fa/0x480 [ 1139.266108][ T5630] elevator_set_default+0x375/0x440 [ 1139.271842][ T5630] blk_register_queue+0x3f3/0x4e0 [ 1139.277485][ T5630] __add_disk+0x6cb/0xe30 [ 1139.282340][ T5630] add_disk_fwnode+0xfb/0x4b0 [ 1139.287546][ T5630] nbd_dev_add+0x733/0xb60 [ 1139.292499][ T5630] nbd_init+0x15f/0x1e0 [ 1139.297252][ T5630] do_one_initcall+0x250/0x870 [ 1139.302554][ T5630] do_initcall_level+0x10a/0x1a0 [ 1139.308170][ T5630] do_initcalls+0x59/0xa0 [ 1139.313036][ T5630] kernel_init_freeable+0x29d/0x3e0 [ 1139.318773][ T5630] kernel_init+0x1d/0x1d0 [ 1139.323627][ T5630] ret_from_fork+0x514/0xb70 [ 1139.328745][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1139.334029][ T5630] [ 1139.334029][ T5630] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1139.341857][ T5630] __mutex_lock+0x19d/0x1550 [ 1139.346981][ T5630] elevator_change+0x1af/0x480 [ 1139.352294][ T5630] elevator_set_none+0xb5/0x140 [ 1139.357685][ T5630] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1139.364026][ T5630] nbd_start_device+0x189/0xb30 [ 1139.369406][ T5630] nbd_genl_connect+0x1597/0x1c10 [ 1139.374960][ T5630] genl_family_rcv_msg_doit+0x233/0x340 [ 1139.381032][ T5630] genl_rcv_msg+0x614/0x7a0 [ 1139.386055][ T5630] netlink_rcv_skb+0x226/0x4a0 [ 1139.391360][ T5630] genl_rcv+0x28/0x40 [ 1139.395906][ T5630] netlink_unicast+0x7bb/0x940 [ 1139.401209][ T5630] netlink_sendmsg+0x813/0xb40 [ 1139.406517][ T5630] sock_sendmsg_nosec+0x13a/0x180 [ 1139.412075][ T5630] ____sys_sendmsg+0x54e/0x850 [ 1139.417371][ T5630] ___sys_sendmsg+0x2a5/0x360 [ 1139.422587][ T5630] __x64_sys_sendmsg+0x1b1/0x290 [ 1139.428065][ T5630] do_syscall_64+0x174/0x580 [ 1139.433185][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.439613][ T5630] [ 1139.439613][ T5630] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1139.448243][ T5630] blk_alloc_queue+0x544/0x690 [ 1139.453728][ T5630] __blk_mq_alloc_disk+0x194/0x390 [ 1139.459378][ T5630] nbd_dev_add+0x494/0xb60 [ 1139.464327][ T5630] nbd_init+0x15f/0x1e0 [ 1139.469020][ T5630] do_one_initcall+0x250/0x870 [ 1139.474320][ T5630] do_initcall_level+0x10a/0x1a0 [ 1139.479783][ T5630] do_initcalls+0x59/0xa0 [ 1139.484637][ T5630] kernel_init_freeable+0x29d/0x3e0 [ 1139.490360][ T5630] kernel_init+0x1d/0x1d0 [ 1139.495237][ T5630] ret_from_fork+0x514/0xb70 [ 1139.500448][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1139.505736][ T5630] [ 1139.505736][ T5630] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1139.512976][ T5630] fs_reclaim_acquire+0x71/0x100 [ 1139.518453][ T5630] __kmalloc_noprof+0xbc/0x720 [ 1139.523747][ T5630] tls_sw_sendmsg+0x599/0x2860 [ 1139.529124][ T5630] sock_sendmsg_nosec+0x90/0x180 [ 1139.534611][ T5630] sock_sendmsg+0x1ca/0x2d0 [ 1139.539640][ T5630] splice_to_socket+0xb5e/0x12a0 [ 1139.545105][ T5630] direct_splice_actor+0x101/0x160 [ 1139.550745][ T5630] splice_direct_to_actor+0x57b/0xcb0 [ 1139.556646][ T5630] do_splice_direct+0x195/0x290 [ 1139.562027][ T5630] do_sendfile+0x52e/0x7c0 [ 1139.566971][ T5630] __se_sys_sendfile64+0x144/0x1a0 [ 1139.572609][ T5630] do_syscall_64+0x174/0x580 [ 1139.577736][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.584152][ T5630] [ 1139.584152][ T5630] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1139.592241][ T5630] __lock_acquire+0x1520/0x2cf0 [ 1139.597654][ T5630] lock_acquire+0x106/0x350 [ 1139.602685][ T5630] lock_sock_nested+0x41/0x100 [ 1139.607971][ T5630] inet_shutdown+0x6a/0x390 [ 1139.613001][ T5630] nbd_mark_nsock_dead+0x2cb/0x550 [ 1139.618649][ T5630] recv_work+0x1cee/0x1e10 [ 1139.623591][ T5630] process_scheduled_works+0xa8e/0x14e0 [ 1139.629672][ T5630] worker_thread+0xa47/0xfb0 [ 1139.634823][ T5630] kthread+0x388/0x470 [ 1139.639436][ T5630] ret_from_fork+0x514/0xb70 [ 1139.644592][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1139.649979][ T5630] [ 1139.649979][ T5630] other info that might help us debug this: [ 1139.649979][ T5630] [ 1139.660248][ T5630] Chain exists of: [ 1139.660248][ T5630] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 1139.660248][ T5630] [ 1139.673331][ T5630] Possible unsafe locking scenario: [ 1139.673331][ T5630] [ 1139.680784][ T5630] CPU0 CPU1 [ 1139.686235][ T5630] ---- ---- [ 1139.691601][ T5630] lock(&nsock->tx_lock); [ 1139.696022][ T5630] lock(&cmd->lock); [ 1139.702528][ T5630] lock(&nsock->tx_lock); [ 1139.709486][ T5630] lock(sk_lock-AF_INET6-NBD); [ 1139.714358][ T5630] [ 1139.714358][ T5630] *** DEADLOCK *** [ 1139.714358][ T5630] [ 1139.722511][ T5630] 3 locks held by kworker/u9:2/5630: [ 1139.727837][ T5630] #0: ffff88802370d940 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1139.739105][ T5630] #1: ffffc90004577c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1139.750865][ T5630] #2: ffff88823bf00f68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1139.760188][ T5630] [ 1139.760188][ T5630] stack backtrace: [ 1139.766082][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1139.766103][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1139.766115][ T5630] Workqueue: nbd4-recv recv_work [ 1139.766134][ T5630] Call Trace: [ 1139.766143][ T5630] [ 1139.766150][ T5630] dump_stack_lvl+0xe8/0x150 [ 1139.766175][ T5630] print_circular_bug+0x2e1/0x300 [ 1139.766192][ T5630] check_noncircular+0x12e/0x150 [ 1139.766218][ T5630] __lock_acquire+0x1520/0x2cf0 [ 1139.766240][ T5630] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1139.766260][ T5630] ? try_to_wake_up+0x8c5/0x14d0 [ 1139.766287][ T5630] ? inet_shutdown+0x6a/0x390 [ 1139.766306][ T5630] lock_acquire+0x106/0x350 [ 1139.766325][ T5630] ? inet_shutdown+0x6a/0x390 [ 1139.766345][ T5630] ? __queue_work+0x1ea/0x10a0 [ 1139.766399][ T5630] lock_sock_nested+0x41/0x100 [ 1139.766416][ T5630] ? inet_shutdown+0x6a/0x390 [ 1139.766435][ T5630] inet_shutdown+0x6a/0x390 [ 1139.766462][ T5630] nbd_mark_nsock_dead+0x2cb/0x550 [ 1139.766487][ T5630] recv_work+0x1cee/0x1e10 [ 1139.766507][ T5630] ? lockdep_unlock+0x5d/0xd0 [ 1139.766523][ T5630] ? __lock_acquire+0x13e8/0x2cf0 [ 1139.766546][ T5630] ? __pfx_recv_work+0x10/0x10 [ 1139.766560][ T5630] ? lockdep_hardirqs_on+0x7a/0x110 [ 1139.766578][ T5630] ? irqentry_exit+0x218/0x8f0 [ 1139.766595][ T5630] ? trace_irq_disable+0x3b/0x140 [ 1139.766625][ T5630] ? rcu_is_watching+0x15/0xb0 [ 1139.766649][ T5630] ? process_scheduled_works+0xa20/0x14e0 [ 1139.766666][ T5630] process_scheduled_works+0xa8e/0x14e0 [ 1139.766693][ T5630] ? __pfx_process_scheduled_works+0x10/0x10 [ 1139.766713][ T5630] ? assign_work+0x3cf/0x5d0 [ 1139.766731][ T5630] worker_thread+0xa47/0xfb0 [ 1139.766757][ T5630] kthread+0x388/0x470 [ 1139.766779][ T5630] ? __pfx_worker_thread+0x10/0x10 [ 1139.766795][ T5630] ? __pfx_kthread+0x10/0x10 [ 1139.766816][ T5630] ret_from_fork+0x514/0xb70 [ 1139.766839][ T5630] ? __pfx_ret_from_fork+0x10/0x10 [ 1139.766860][ T5630] ? __switch_to+0xc89/0x1420 [ 1139.766879][ T5630] ? __pfx_kthread+0x10/0x10 [ 1139.766900][ T5630] ret_from_fork_asm+0x1a/0x30 [ 1139.766920][ T5630] [ 1139.891792][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8214'.