last executing test programs: 57.814675041s ago: executing program 4 (id=3639): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140a, 0x205cfe77fa614fc7, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4a890) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 57.437105333s ago: executing program 4 (id=3645): syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x6c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) socket(0x8, 0x1, 0x7) 57.33051731s ago: executing program 4 (id=3648): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRESDEC=r0], 0x44}}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f00000051c0)=""/264, 0x108}, {&(0x7f0000002940)=""/202, 0xca}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/131, 0x83}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/139, 0x8b}, {&(0x7f0000004b80)=""/130, 0x82}, {&(0x7f0000004c40)=""/34, 0x22}], 0x8}, 0x9}], 0x1, 0x60, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000040)=0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0xb8, "3d32f3c500f11e26092605301bf57fbc6071965f885b27927057fc63458c0d4cee9fb752630a91f3de41d593f3978e329f385e2c152498df8a52ed6914b98db97c16a7ee387c89f9c0485d28b63095c01a0fa35fb88441b33332fd0989e9124c11500d6d5948a23536313bbed92aaac5a926517b166ae5209497149f23cb095bd29de1bbf35a23ea15cde9fbf687d48476b7871f4a67e6ae2bd06aa19f3f994077bf14e1c02af9bf90b8301feb399fcb5369e39429849159"}, &(0x7f00000001c0)=0xdc) (async) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0xb8, "3d32f3c500f11e26092605301bf57fbc6071965f885b27927057fc63458c0d4cee9fb752630a91f3de41d593f3978e329f385e2c152498df8a52ed6914b98db97c16a7ee387c89f9c0485d28b63095c01a0fa35fb88441b33332fd0989e9124c11500d6d5948a23536313bbed92aaac5a926517b166ae5209497149f23cb095bd29de1bbf35a23ea15cde9fbf687d48476b7871f4a67e6ae2bd06aa19f3f994077bf14e1c02af9bf90b8301feb399fcb5369e39429849159"}, &(0x7f00000001c0)=0xdc) 57.146013118s ago: executing program 4 (id=3652): r0 = socket(0x400000000010, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='M', 0x1}], 0x1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) (rerun: 32) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0xa, 0x300) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32) close(r7) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 56.968504904s ago: executing program 3 (id=3656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f00000002c0)="96452a", &(0x7f0000001680)=""/227}, 0x20) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2d, 0x25dfdbfc, {0x2, 0x20, 0x7b, 0xcb, r4}, [@IFA_FLAGS={0x8, 0x8, 0x30}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x105}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) socket$inet6_tcp(0xa, 0x1, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @local, 0x8800b}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 56.933470187s ago: executing program 1 (id=3657): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000004640)=[{{&(0x7f0000001e80)={0xa, 0x4e21, 0x5, @mcast1, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f00000021c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}], 0x1, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80180006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 56.820579028s ago: executing program 4 (id=3659): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0xc, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000040), 0x0}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x400, 0x2070bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x121}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20004880) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xff, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x2, 0x6}}) r5 = socket(0x2b, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x64}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) 56.778596194s ago: executing program 0 (id=3660): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x0, 0xff, 0x3, 0x6, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl(r0, 0x8b32, &(0x7f0000000040)) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adfe", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0x3}]}], @echo_reply}}}}}, 0x0) 56.738562884s ago: executing program 1 (id=3661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r1, 0xe5214b6eaf9e8f75, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 56.620535776s ago: executing program 2 (id=3662): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000040)="447435b204aca341933c8ed8ba46345a9b2450519d6763ea", 0x18}], 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a007000040000000100000004004480140001800d00108006000a003a000000e10000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4060000}, 0x4008094) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x8000) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f052", 0xf1}], 0x1, 0x1) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000c80)={0x0, 0x262, 0x0, [0x6, 0x9, 0x908, 0x3, 0x80], [0x0, 0x9, 0x2, 0x1, 0x1ff, 0xfffffffffffff000, 0xfffffffffffffffb, 0x4, 0x31, 0x4, 0xffffffffffffffff, 0x1000, 0x401, 0x6, 0xfc3, 0x7, 0x7, 0xa6, 0x7, 0x6, 0x7, 0x7, 0x6e1, 0x6, 0xffffffffffffffff, 0x0, 0x9, 0xd4, 0x1, 0x9, 0x2, 0x0, 0x10000, 0x0, 0x5, 0x2, 0x8, 0x6, 0x4, 0x8, 0x5, 0x4000000000000, 0x9, 0x3, 0xc, 0xffffffff, 0x80, 0x1000, 0x3, 0x7f, 0xfffffffffffffffc, 0xffffffff, 0x1, 0x6, 0xffffffffffff8001, 0x9, 0x8, 0x4, 0x1, 0x7a3, 0x20, 0x610f, 0x4, 0xe0, 0xfffffffffffff801, 0x0, 0x100, 0x7fff, 0x6, 0xffffffffffffffff, 0x346, 0xfffffffffe000000, 0xfffffffffffffffa, 0x9, 0xfffffffffffffd0c, 0x3, 0x9, 0x4, 0x7, 0x9, 0xffffffffffffff3b, 0xfffffffffffffffc, 0x4, 0xe, 0x7, 0x359, 0x81, 0xffffffff, 0xc, 0x5, 0x275d, 0xff, 0xf, 0xe, 0x0, 0x100000001, 0x1, 0x40, 0x3, 0x4, 0x10, 0x1, 0x0, 0x8, 0x4, 0x800, 0x8, 0x3, 0x3, 0x7fffffffffffffff, 0x5, 0x40, 0x1ff, 0x5, 0x2, 0x0, 0x3, 0x10, 0x7, 0xfff, 0x5b0]}) 56.579825155s ago: executing program 4 (id=3663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000002000000010000001c000180080003007f0000010600010002000000080006002e"], 0x30}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48000000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x1d}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 56.565536515s ago: executing program 1 (id=3664): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848330000005e140602000000000e000a000f00000002800000121fd2", 0x2f}], 0x1}, 0x40044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) 56.380415028s ago: executing program 0 (id=3665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000003c0)='vlan1\x00') sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x7c, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2321f4ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4080) 56.265356781s ago: executing program 1 (id=3666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340400000920800024000000000080004400000000008000140000000110800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) 56.258214604s ago: executing program 2 (id=3667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) 56.088938583s ago: executing program 0 (id=3668): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x380, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@loopback, @loopback, 0xff, 0xffffffff, 'veth0_vlan\x00', 'hsr0\x00', {0xff}, {}, 0x2f, 0x2, 0x4}, 0x0, 0x1b8, 0x200, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@comment={{0x120}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x9, 0x7ff, 'pptp\x00', {0x100000000}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@icmp={{0x28}, {0x3, "d982"}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x200, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'wg1\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1b, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r9, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r9, 0x5) write$tun(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c3700fe", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250800000008000c0002000000080007006401010208000700ac141410080008007f00000106000b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40080d4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x38, 0x0, 0x1, 0x405, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_MASTER={0x4}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x28b4c3c6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xff}]}]}, 0x38}}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x400, 0x6, 0x4, 0x0, 0x10005, 0x40009, 0x101, 0x2, r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 56.001232393s ago: executing program 1 (id=3669): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x200, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @NDA_MASTER={0x8, 0x9, 0xd}]}, 0x30}}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x200, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @NDA_MASTER={0x8, 0x9, 0xd}]}, 0x30}}, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 55.913256154s ago: executing program 2 (id=3670): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000010800)=ANY=[], 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0x20000b, 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "000000000000080118000200000006000a00"}, 0x80, 0x0}, 0x0) 55.755963525s ago: executing program 1 (id=3671): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r1, 0x0, 0x53, 0x0, &(0x7f0000002e40)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) (async) sendmmsg$inet6(r0, &(0x7f0000004640)=[{{&(0x7f0000001e80)={0xa, 0x4e21, 0x5, @mcast1, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f00000021c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}], 0x1, 0x20000000) recvfrom(r0, &(0x7f0000000000)=""/232, 0xe8, 0x40010020, 0x0, 0x0) 55.740984108s ago: executing program 3 (id=3672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000ffd9df250300080008000100b7"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x18000000000002a0, 0xfea7, 0xfffffffffffffdea, &(0x7f00000004c0)="b9fe030768045c8c989a14f088a865f986dd", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@mpls_getroute={0xa0, 0x1a, 0x800, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x0, 0x20, 0x9, 0x0, 0x2, 0xff, 0x5, 0x1600}, [@RTA_NEWDST={0x84, 0x13, [{0xf1a97, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2}, {0x4f82c, 0x0, 0x1}, {0x4db, 0x0, 0x1}, {0xfff25, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xe500, 0x0, 0x1}, {0x3ff}, {0x2}, {0xf, 0x0, 0x1}, {0x6c2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {}, {0x1000}, {0x7, 0x0, 0x1}, {0x80}, {0x81, 0x0, 0x1}, {0xfff81}, {0x9}, {0x7}, {0x8}, {0x2}, {0x8}, {0xd, 0x0, 0x1}, {0x929f}, {0x101}, {0x2}, {0x4}, {0x257c0}, {0xbb62}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40001) 55.59282744s ago: executing program 2 (id=3673): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) 55.544534235s ago: executing program 0 (id=3674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r1, 0xe5214b6eaf9e8f75, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 55.525647352s ago: executing program 3 (id=3675): r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') connect$l2tp(r0, &(0x7f00000003c0)={0x2, 0x0, @local, 0x2}, 0x10) (async) connect$l2tp(r0, &(0x7f00000003c0)={0x2, 0x0, @local, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x1c, 0x0, "89196ac52ed930126c22c56547dc4a9344d39aeda56710ec67d4df17b5e0b59dd3bbfcfbe49255616e632557baca6437755a84423e31eaed8439c37ca44d29242678760bff7304e718ba46c6494dbb48"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x1c, 0x0, "89196ac52ed930126c22c56547dc4a9344d39aeda56710ec67d4df17b5e0b59dd3bbfcfbe49255616e632557baca6437755a84423e31eaed8439c37ca44d29242678760bff7304e718ba46c6494dbb48"}, 0xd8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg(r3, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5a73c30a2810aed3fd987c4c0160f6649c6e7896761ab843f2d5b78ceea1540107c82117babd63b9607f5796e25f92e52aaa1236551b86c02485da000f7b4e20c4", @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380"], 0x34}, 0x1, 0x0, 0x0, 0x900}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x6793953e8ffc9188}, 0x4000010) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x6793953e8ffc9188}, 0x4000010) 55.428874794s ago: executing program 2 (id=3676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x3, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 55.421679757s ago: executing program 0 (id=3677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000006c0)=0x6, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-ce\x00'}, 0x58) 55.312293844s ago: executing program 3 (id=3678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r4, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1460, 0x2d, 0x107, 0xfffffffe, 0x1, {0x9, 0x7c}, [@nested={0x143b, 0xa8, 0x0, 0x1, [@generic="5c9f8876b5539c8fdf5f6f294352a8b10487e0b9459fd46b1f04d762d8e5c5af70b1d5dc", @nested={0x222, 0xc2, 0x0, 0x1, [@generic="321e0aea15689b773af678d3bc8dd2c218", @nested={0x4, 0x143}, @generic="fbc47c491471c4a44b6068848c2938d14c74faff2e3d8e2d5f6664bfc4581142e297152c8f80c7d0d2de85eee6d84aeb083f7168de522e35f8905fd3b60ef0b79834f10a064636117ac7c3c8daa44183824f89aa138eb6a125c1d6d19ca45953fdc4adf6f0ed50e14077524130158885786dbb", @nested={0x4, 0x31}, @typed={0x8, 0xef, 0x0, 0x0, @uid}, @generic="b78c825a615b5b446103fb01c7a2a85e227574f9e05d0a0a28ab8e2eb95f429955ae0b25970b3ce051efec34df631b768b74c812148659d024a894f3edfc2b568f391b932762f8cd7e1d78d6f72885686d06e6a1880dc64aed28e7540175560172053b8d7060054173a64ec28c21bca86e1fa49dcf4d2674900f0eb2f9a247c3fb5da9bbf524db957a1d6e65f44b539e7463382c00c2446b44e2bba62d3fbd6efbc29dab28cf885e913aef20896e84eedd72e9a11a287ec950d6094c80c6896b4856f2ee3b914a23c2fe3f8e330e6578134b0d5fa24d89613b109ab4eab0435bf43624d0d3d20a1d33da9d04464d7690ce1c", @generic="3679429e8e471b9579a7977f1634084aa4765df9da3ba80a8c914c7e989a8e475b220b98173be426b41ed4e71d44746c61259974d9f4735bd4d459f6b2e1305d14c93343b2fdc3ab741a00fac15d94c2a6e1ce426b5b11ab41ae96b89490b773d6993fdee29edfd472a76cac6c633d58760f06d58cdb7765f9cfc2fa0d1ced5ea4f1d6e6d8a5731f2ca9335ec2bb337d2fbc4fb7e2b7bfb7"]}, @generic="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", @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x3}, @generic="4ad38d4b09b810e33aa3366baa1f6950e0e0790a853113464fb0cb8592ed907e0e2554181177", @generic="7daf974286d0d498c52e87ed015f9233836ef96529f5d7486a721ca380f5e2baf1a486673dccdc5c2b6e34a115b81567756545e2c5108984aef0b4997ff6ec3bffeace0a3dbb8fcc55e016c8696575958efb087781e24bcaae195cceee9522fe0a57685f76ecacec6927a608017f679bb68793bcbec859afce7bcf31baca4582f00673a4b846930fd7a68e4cc4d90387b4a0591be24ec1741eb4534ec65519af80d537bd4b553bfaa73f4409ef7b81ef3bbc0d74f22fd92be5074ce87b7cdb5f0a01166d1baf46ff7309a31c57625845aa9593be7257", @generic="5d0191842b", @generic="bc18de096da2e7af73b7394f27512375197b0f42077c6a3e7c156827828162bb4a6497741a32bde648a55373e362204ab8ab6a6d570ba864fc27c16d83c448803339193a266c3c0c6ad3bf04eb96ccf7007c2e861a006d4381be8ec2c120614f4caad7657d15486322160a68630c462ad0ca49bfa68e1c622fa77e9fb2a6d67e282c7b4aa3f87e7b85f6b0b51784305e1c5c54e2beaf939818ff22cf53fc4380ab85aef030d8beb290c7c242b583e56eec33287b002240c693fb0ab8664b43be83e4bb3c6dafdc5ad201b30f7377444b4726a9f1b242dda33645def3672aa703f986"]}, @typed={0x8, 0xac, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x10a, 0x0, 0x0, @fd=r2}]}, 0x1460}, 0x1, 0x0, 0x0, 0x4c855}, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 55.252068678s ago: executing program 0 (id=3679): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x24000841) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r6, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 55.248800259s ago: executing program 2 (id=3680): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xb}, {0xc, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0xc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8001}, 0x20008050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5d}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) shutdown(r2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa83, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf000, 0x10}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4a69240691b2dc9, &(0x7f00000000c0)={0xa, 0x4e23, 0x405b3, @loopback, 0x8000006}, 0x1c) 55.153427769s ago: executing program 3 (id=3681): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x474, 0x2, [@TCA_BPF_ACT={0x470, 0x1, [@m_connmark={0x140, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4, 0x3}, 0x1}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x230, 0x13, 0x0, 0x0, {{0x7}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x65, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e86778795"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10"}}]}, {0x127, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'caif0\x00', @ifru_flags}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000004c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000003800)={0x1414, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1098, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x84, 0x3, "49981019caa27739cad73ca5f9f7f2733b824e923b4bc3ded8b924feca60022eee2a2233d54bb14a9c89bd7108ed53367e294c416daf5f67dcf83a45c83d97bf6abe242aa4ec83ba30b76597b802ed5835b1515cd7762cca34f697fcd19e92b0f23bded56fa8340b2c7beca4a104a46c0993703e3c7c388cb0bfacf973fd496b"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5b640000}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc1, 0x3, "e7234e6f846059315ada28aa59f31e9d840d32e2396cd80b68fa029960187a251ecdab814fe01a98c03f1d2712018325e64568aad80f3c1c6ab237488d2fb7757baa0b8b94b947c2f186547820af7964b29aae417748f63be50f17b7677260bc326e3c1af34384915ce4808e852e58249a5f4df927536294010cb7067bdce0dcffde453702829b20b0ff25522c478e3a3b0d4d9d5d15f99dc109fd7e5fefe11a3800f682ee40131bca3f2c8423fcd98edef7f3df066ddd5a232303c500"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "467893f29e5acaba19202c4f1510805558123939"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f07b184ac6b4ab5b936b6477eff60ea5dcd4215bc12e129fa6cbec8c67840682"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x1414}, 0x1, 0x0, 0x0, 0x80}, 0x8084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x474, 0x2, [@TCA_BPF_ACT={0x470, 0x1, [@m_connmark={0x140, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4, 0x3}, 0x1}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x230, 0x13, 0x0, 0x0, {{0x7}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x65, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e86778795"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10"}}]}, {0x127, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'caif0\x00', @ifru_flags}) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000004c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000003800)={0x1414, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1098, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x84, 0x3, "49981019caa27739cad73ca5f9f7f2733b824e923b4bc3ded8b924feca60022eee2a2233d54bb14a9c89bd7108ed53367e294c416daf5f67dcf83a45c83d97bf6abe242aa4ec83ba30b76597b802ed5835b1515cd7762cca34f697fcd19e92b0f23bded56fa8340b2c7beca4a104a46c0993703e3c7c388cb0bfacf973fd496b"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5b640000}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc1, 0x3, "e7234e6f846059315ada28aa59f31e9d840d32e2396cd80b68fa029960187a251ecdab814fe01a98c03f1d2712018325e64568aad80f3c1c6ab237488d2fb7757baa0b8b94b947c2f186547820af7964b29aae417748f63be50f17b7677260bc326e3c1af34384915ce4808e852e58249a5f4df927536294010cb7067bdce0dcffde453702829b20b0ff25522c478e3a3b0d4d9d5d15f99dc109fd7e5fefe11a3800f682ee40131bca3f2c8423fcd98edef7f3df066ddd5a232303c500"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "467893f29e5acaba19202c4f1510805558123939"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f07b184ac6b4ab5b936b6477eff60ea5dcd4215bc12e129fa6cbec8c67840682"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x1414}, 0x1, 0x0, 0x0, 0x80}, 0x8084) (async) 55.056182253s ago: executing program 3 (id=3682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) bind$netlink(r14, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r14, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x1ffffffc, {0x0, 0x0, 0x0, r15, 0x60046, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0xa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, r17, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0x13c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x38}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2a}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x58}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x108c}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x258}}, 0x40004) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x38, r17, 0x21, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x41}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x50) 0s ago: executing program 32 (id=3679): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x24000841) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r6, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): n pedit unable to extract header offset for header type (0x5) [ 388.351482][T13926] tc action pedit unable to extract header offset for header type (0x5) [ 388.359935][T13926] tc action pedit unable to extract header offset for header type (0x5) [ 388.368414][T13926] tc action pedit unable to extract header offset for header type (0x5) [ 388.376839][T13926] tc action pedit unable to extract header offset for header type (0x5) [ 388.385270][T13926] tc action pedit unable to extract header offset for header type (0x5) [ 388.393647][T13926] tc action pedit unable to extract header offset for header type (0x5) [ 388.402123][T13926] 0: reclassify loop, rule prio 0, protocol 800 [ 388.427919][T13929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2257'. [ 388.504233][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.193646][T13960] validate_nla: 6 callbacks suppressed [ 389.193669][T13960] netlink: 'syz.0.2265': attribute type 5 has an invalid length. [ 389.274945][T13966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2268'. [ 389.339493][T13966] netlink: 'syz.2.2268': attribute type 3 has an invalid length. [ 389.351637][T13966] netlink: 'syz.2.2268': attribute type 2 has an invalid length. [ 389.362312][T13966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2268'. [ 389.372922][T13964] netlink: 'syz.0.2265': attribute type 11 has an invalid length. [ 389.381422][T13964] netlink: 'syz.0.2265': attribute type 11 has an invalid length. [ 389.390835][T13964] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2265'. [ 389.544126][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.559392][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.583899][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.621311][T13980] openvswitch: netlink: IPv6 tunnel dst address is zero [ 389.721534][T13945] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 389.777072][T13986] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.929668][T13955] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 390.215669][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'. [ 390.248584][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'. [ 390.327871][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 390.396280][T14011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 390.584073][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.796431][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'. [ 390.859055][T14014] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 390.871948][T14020] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.2282:14020 [ 391.242386][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2293'. [ 391.624198][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.665604][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2300'. [ 391.805934][ T5621] block nbd4: Receive control failed (result -107) [ 391.972809][T14083] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 392.014966][T14083] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.044401][T14083] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.522641][T14103] syzkaller0: entered promiscuous mode [ 392.537214][T14103] syzkaller0: entered allmulticast mode [ 392.641476][T14105] bond0: entered promiscuous mode [ 392.664077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.674547][T14105] bond_slave_0: entered promiscuous mode [ 392.720842][T14105] bond_slave_1: entered promiscuous mode [ 392.769515][T14105] debugfs: 'hsr0' already exists in 'hsr' [ 392.790260][T14105] Cannot create hsr debugfs directory [ 392.798027][T14105] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 392.810644][T14105] hsr0: entered promiscuous mode [ 393.714600][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.744071][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.784146][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.824223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.692316][T14152] IPv6: NLM_F_REPLACE set, but no existing node found! [ 397.769530][T14152] __nla_validate_parse: 3 callbacks suppressed [ 397.769553][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 397.821573][T14159] Cannot find set identified by id 0 to match [ 397.864400][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.057039][T14161] netlink: 'syz.0.2321': attribute type 13 has an invalid length. [ 398.127050][T14161] erspan0: refused to change device tx_queue_len [ 398.147243][T14161] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 398.263915][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 398.316664][T14177] netlink: 'syz.1.2322': attribute type 19 has an invalid length. [ 398.375765][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'. [ 398.436474][T14187] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 398.500992][T14187] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2326'. [ 398.541467][T14190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2326'. [ 398.701469][T14194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2327'. [ 398.726887][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'. [ 398.889603][T14201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2328'. [ 398.904066][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.574310][T14231] netlink: 'syz.1.2337': attribute type 12 has an invalid length. [ 399.603614][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 399.640936][T14231] netlink: 'syz.1.2337': attribute type 12 has an invalid length. [ 399.721121][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 399.944387][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.383817][T14264] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 400.601130][T14268] syzkaller1: entered promiscuous mode [ 400.629929][T14268] syzkaller1: entered allmulticast mode [ 400.680275][T14272] netlink: 'syz.0.2348': attribute type 1 has an invalid length. [ 400.726799][T14272] netlink: 'syz.0.2348': attribute type 2 has an invalid length. [ 400.984124][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.441034][T14299] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20004 [ 401.784295][T14299] syz.3.2358 (14299) used greatest stack depth: 17984 bytes left [ 402.015420][T14311] netlink: 'syz.2.2362': attribute type 5 has an invalid length. [ 402.024199][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.161699][T14323] tipc: Enabling of bearer rejected, failed to enable media [ 402.692479][T14339] 0: renamed from hsr0 [ 402.708091][T14339] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.723314][T14339] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.759191][T14339] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 402.852020][T14341] syzkaller0: entered promiscuous mode [ 402.869653][T14341] syzkaller0: entered allmulticast mode [ 403.064068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.263469][T14354] netlink: 'syz.2.2376': attribute type 1 has an invalid length. [ 403.292559][T14354] Bluetooth: hci0: unsupported parameter 5134 [ 403.309782][T14354] Bluetooth: hci0: unsupported parameter 8192 [ 403.358965][T14354] Bluetooth: hci0: unsupported parameter 5134 [ 403.394765][T14354] Bluetooth: hci0: unsupported parameter 8192 [ 403.600496][T14365] SET target dimension over the limit! [ 403.698839][T14371] __nla_validate_parse: 10 callbacks suppressed [ 403.698863][T14371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2381'. [ 403.718107][T14371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2381'. [ 403.774694][T14379] netlink: 'syz.2.2382': attribute type 13 has an invalid length. [ 404.104377][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.258423][T14400] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.322257][T14406] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2386'. [ 405.144194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.355976][T14418] IPVS: length: 4096 != 24 [ 406.184093][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.655531][T14371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.110965][T14438] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2398'. [ 407.124572][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 407.224068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.321447][T14449] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2402'. [ 407.331630][T14450] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2402'. [ 407.391946][T14447] can: request_module (can-proto-5) failed. [ 407.486907][T14453] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 407.502364][T14453] bond10 (unregistering): Released all slaves [ 407.900288][T14475] syzkaller1: entered promiscuous mode [ 407.910445][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 407.921297][T14475] syzkaller1: entered allmulticast mode [ 407.962818][T14482] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 408.264413][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.317755][T14497] xt_bpf: check failed: parse error [ 408.331935][T14497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2414'. [ 408.347044][T14497] netlink: 'syz.4.2414': attribute type 2 has an invalid length. [ 408.382991][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 408.461089][T14500] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 408.467809][T14500] syzkaller1: linktype set to 823 [ 409.304176][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.350953][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.093520][T14486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.251568][T14528] __nla_validate_parse: 1 callbacks suppressed [ 411.251587][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 411.267781][T14528] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2424'. [ 411.277088][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 411.384059][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.438805][T14530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2425'. [ 411.452930][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'. [ 411.508419][T14530] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 412.087647][T14541] team0: Device gtp0 is up. Set it down before adding it as a team port [ 412.118543][T14548] netlink: 'syz.4.2430': attribute type 1 has an invalid length. [ 412.143064][T14548] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 412.165394][T14548] xt_SECMARK: invalid mode: 9 [ 412.357291][T14561] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 412.365594][T14558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.424306][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.641185][T14569] batadv0: entered promiscuous mode [ 412.649030][T14569] macsec2: entered promiscuous mode [ 412.659533][T14569] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 412.672490][T14569] batadv0: left promiscuous mode [ 413.106505][T14600] netlink: 'syz.3.2447': attribute type 1 has an invalid length. [ 413.186392][T14600] bridge4: entered promiscuous mode [ 413.464127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.512244][T14613] netlink: 253 bytes leftover after parsing attributes in process `syz.1.2449'. [ 413.552859][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 413.588289][T14613] 8021q: VLANs not supported on gre0 [ 413.609971][T14617] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 413.684227][T14617] vlan3: entered allmulticast mode [ 413.696757][T14617] bond0: entered allmulticast mode [ 413.703472][T14617] bond_slave_0: entered allmulticast mode [ 413.710181][T14617] bond_slave_1: entered allmulticast mode [ 413.986086][T14633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.009922][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 414.091068][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'. [ 414.214256][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'. [ 414.400760][T14657] openvswitch: netlink: Message has 8 unknown bytes. [ 414.422208][T14657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.504242][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.712555][T14670] tc action pedit offset must be on 32 bit boundaries [ 414.734586][T14676] nbd: couldn't find a device at index 0 [ 414.818842][T14680] syzkaller0: entered promiscuous mode [ 414.850372][T14680] syzkaller0: entered allmulticast mode [ 415.463111][T14714] ip_tables: iptables: counters copy to user failed while replacing table [ 415.544309][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.608773][T14717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.874081][T14732] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 415.883668][T14732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.207473][T14742] netlink: 'syz.0.2486': attribute type 4 has an invalid length. [ 416.584410][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.778676][T14769] netlink: 'syz.4.2494': attribute type 15 has an invalid length. [ 417.057145][T14785] netlink: 'syz.2.2499': attribute type 1 has an invalid length. [ 417.132463][T14784] openvswitch: netlink: Multiple metadata blocks provided [ 417.156106][T14791] Bluetooth: hci0: unsupported parameter 5135 [ 417.169723][T14791] Bluetooth: hci0: invalid len left 4, exp >= 34 [ 417.233367][T14785] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.287654][T14794] __nla_validate_parse: 5 callbacks suppressed [ 417.287675][T14794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2501'. [ 417.632373][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 417.685788][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 417.798331][T14823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.892010][T14830] syzkaller0: entered promiscuous mode [ 417.899277][T14830] syzkaller0: entered allmulticast mode [ 417.978716][T14834] syzkaller0: entered promiscuous mode [ 417.985383][T14834] syzkaller0: entered allmulticast mode [ 418.051669][T14837] Bluetooth: hci0: unsupported parameter 5135 [ 418.058995][T14837] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 418.176910][T14841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.201068][T14843] netlink: 'syz.4.2516': attribute type 3 has an invalid length. [ 418.258365][T14845] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 418.597028][T14856] netlink: 'syz.3.2521': attribute type 83 has an invalid length. [ 418.664305][ C0] net_ratelimit: 1 callbacks suppressed [ 418.664327][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.047316][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2528'. [ 419.429096][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 419.463358][T14905] netlink: 'syz.4.2538': attribute type 23 has an invalid length. [ 419.524102][T14911] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2538'. [ 419.524698][T14910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2540'. [ 419.704081][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.761734][T14919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.831502][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2544'. [ 419.855528][T14923] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2544'. [ 419.865945][T14923] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2544'. [ 419.887332][T14917] netlink: 'syz.3.2543': attribute type 1 has an invalid length. [ 420.088649][T14928] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 420.168867][T14935] syzkaller0: entered promiscuous mode [ 420.249330][T14935] syzkaller0: entered allmulticast mode [ 420.468045][T14946] gre2: entered promiscuous mode [ 420.744153][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.862601][T14969] netlink: 'syz.0.2562': attribute type 4 has an invalid length. [ 420.888987][T14971] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 421.292262][T14993] Bluetooth: hci0: unsupported parameter 5135 [ 421.334162][T14993] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 421.440981][T15000] netlink: 'syz.1.2571': attribute type 12 has an invalid length. [ 421.507974][T15000] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 421.784139][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.805955][T15015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.009534][T15020] netlink: 'syz.4.2577': attribute type 1 has an invalid length. [ 422.280377][T15023] netlink: 'syz.1.2578': attribute type 29 has an invalid length. [ 422.314673][T15023] __nla_validate_parse: 9 callbacks suppressed [ 422.314692][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 422.550409][T15041] Bluetooth: hci0: unsupported parameter 5135 [ 422.571196][T15041] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 422.671702][T15045] netlink: 'syz.0.2584': attribute type 5 has an invalid length. [ 422.824066][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.028056][T15065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2590'. [ 423.045664][T15062] xt_hashlimit: size too large, truncated to 1048576 [ 423.149845][T15071] netlink: zone id is out of range [ 423.170574][T15071] netlink: zone id is out of range [ 423.184494][T15071] netlink: zone id is out of range [ 423.202836][T15071] netlink: zone id is out of range [ 423.233119][T15071] netlink: zone id is out of range [ 423.311553][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'. [ 423.352227][T15076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.365755][T15073] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2593'. [ 423.482653][T15083] Bluetooth: hci0: unsupported parameter 5135 [ 423.503392][T15083] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 423.845469][T15100] net_ratelimit: 794 callbacks suppressed [ 423.845488][T15100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.871962][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.056821][T15104] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2604'. [ 424.098381][T15110] openvswitch: netlink: IP tunnel dst address not specified [ 424.106996][T15110] sock: sock_timestamping_bind_phc: sock not bind to device [ 424.116868][T15110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2606'. [ 424.215993][T15112] tipc: Started in network mode [ 424.240077][T15112] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 424.278662][T15117] Bluetooth: hci0: unsupported parameter 5135 [ 424.322523][T15117] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 424.377681][T15120] tipc: Can't bind to reserved service type 1 [ 424.603001][T15130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.904220][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.944712][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.009242][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.056917][T15157] validate_nla: 2 callbacks suppressed [ 427.056940][T15157] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 427.130806][T15157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2619'. [ 427.404631][T15173] Bluetooth: hci0: unsupported parameter 5135 [ 427.411205][T15173] Bluetooth: hci0: unsupported parameter 8209 [ 427.418108][T15173] Bluetooth: hci0: unsupported parameter 5135 [ 427.424478][T15176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2625'. [ 427.434333][T15173] Bluetooth: hci0: unsupported parameter 8209 [ 427.442136][T15174] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 427.521118][T15174] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 427.588056][T15174] ip6gre1: entered allmulticast mode [ 427.684190][T15183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.875830][T15186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2629'. [ 427.997286][T15195] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 428.024157][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.053351][T15195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.130323][T15197] FAULT_INJECTION: forcing a failure. [ 428.130323][T15197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.200557][T15197] CPU: 0 UID: 0 PID: 15197 Comm: syz.4.2633 Not tainted syzkaller #0 PREEMPT(full) [ 428.200588][T15197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.200601][T15197] Call Trace: [ 428.200610][T15197] [ 428.200620][T15197] dump_stack_lvl+0xe8/0x150 [ 428.200660][T15197] should_fail_ex+0x410/0x560 [ 428.200702][T15197] _copy_from_iter+0x1d3/0x1660 [ 428.200757][T15197] ? __pfx__copy_from_iter+0x10/0x10 [ 428.200795][T15197] ? ip6_dst_lookup_tail+0x2a4/0x1610 [ 428.200934][T15197] ? skb_put+0x112/0x210 [ 428.200969][T15197] rawv6_send_hdrinc+0x894/0x1950 [ 428.201072][T15197] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 428.201103][T15197] ? txopt_get+0x343/0x3f0 [ 428.201137][T15197] ? __pfx_txopt_get+0x10/0x10 [ 428.201180][T15197] rawv6_sendmsg+0x12fb/0x18c0 [ 428.201227][T15197] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 428.201295][T15197] ? sock_rps_record_flow+0x19/0x350 [ 428.201364][T15197] ? inet_sendmsg+0x298/0x320 [ 428.201390][T15197] ? __pfx_inet_sendmsg+0x10/0x10 [ 428.201414][T15197] sock_sendmsg_nosec+0x10e/0x180 [ 428.201444][T15197] ____sys_sendmsg+0x54e/0x850 [ 428.201484][T15197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.201528][T15197] ? import_iovec+0x73/0xa0 [ 428.201554][T15197] ___sys_sendmsg+0x2a5/0x360 [ 428.201586][T15197] ? __lock_acquire+0x683/0x2cf0 [ 428.201624][T15197] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.201696][T15197] ? __fget_files+0x2a/0x420 [ 428.201727][T15197] ? __fget_files+0x3a2/0x420 [ 428.201780][T15197] __x64_sys_sendmsg+0x1b1/0x290 [ 428.201815][T15197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.201873][T15197] do_syscall_64+0x166/0x520 [ 428.201901][T15197] ? trace_irq_disable+0x3b/0x140 [ 428.201931][T15197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.201954][T15197] ? clear_bhb_loop+0x70/0xc0 [ 428.201981][T15197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.202003][T15197] RIP: 0033:0x7fa0fa59e0d9 [ 428.202024][T15197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.202044][T15197] RSP: 002b:00007fa0fb535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.202067][T15197] RAX: ffffffffffffffda RBX: 00007fa0fa825fa0 RCX: 00007fa0fa59e0d9 [ 428.202082][T15197] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 428.202095][T15197] RBP: 00007fa0fb535090 R08: 0000000000000000 R09: 0000000000000000 [ 428.202108][T15197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.202120][T15197] R13: 00007fa0fa826038 R14: 00007fa0fa825fa0 R15: 00007ffdf7211688 [ 428.202154][T15197] [ 428.595293][T12816] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 60 sec [ 428.618440][T15209] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 428.626570][T15209] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2635'. [ 428.733141][T15212] Bluetooth: hci0: unsupported parameter 5135 [ 428.740061][T15212] Bluetooth: hci0: unsupported parameter 8212 [ 428.746770][T15212] Bluetooth: hci0: unsupported parameter 5135 [ 428.752971][T15212] Bluetooth: hci0: unsupported parameter 8212 [ 428.938337][T15219] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2638'. [ 428.982383][T15221] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2641'. [ 429.005352][T15221] wg1: entered promiscuous mode [ 429.019386][T15221] wg1: entered allmulticast mode [ 429.057609][T15219] netlink: 'syz.0.2638': attribute type 10 has an invalid length. [ 429.065885][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.147031][T15219] syz_tun: entered promiscuous mode [ 429.213629][T15219] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 429.383275][T15235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.394218][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2643'. [ 429.405036][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 429.462890][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 429.539346][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2643'. [ 429.567636][T15242] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.2646'. [ 429.604661][T15242] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 430.079268][T15265] mac80211_hwsim hwsim3 : renamed from wlan1 [ 430.104210][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.469977][T15278] xt_ecn: cannot match TCP bits for non-tcp packets [ 430.796643][T15295] netlink: 'syz.3.2665': attribute type 2 has an invalid length. [ 430.993713][T15301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.144765][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.385926][T15322] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 431.508255][T15327] openvswitch: netlink: IP tunnel dst address not specified [ 432.172725][T15352] syzkaller0: entered promiscuous mode [ 432.178927][T15362] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.186052][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.208670][T15352] syzkaller0: entered allmulticast mode [ 432.779913][T15388] netlink: 'syz.3.2691': attribute type 10 has an invalid length. [ 433.224629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.710939][T15436] netlink: 'syz.0.2696': attribute type 1 has an invalid length. [ 433.925242][T15459] batman_adv: batadv0: Adding interface: gretap0 [ 433.931780][T15459] batman_adv: batadv0: The MTU of interface gretap0 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.959662][T15459] batman_adv: batadv0: Interface activated: gretap0 [ 434.069927][T15465] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 434.265706][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.304615][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.196522][T15427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.344167][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.556477][T15502] wg1: entered promiscuous mode [ 436.810201][T15512] __nla_validate_parse: 40 callbacks suppressed [ 436.810222][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 437.027363][T15528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2724'. [ 437.050790][T15512] hsr_slave_1 (unregistering): left promiscuous mode [ 437.087866][ T36] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 437.384694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.443643][T15546] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 437.475329][T15546] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2731'. [ 437.516335][T15553] xt_hashlimit: size too large, truncated to 1048576 [ 437.576637][T15557] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2733'. [ 437.603795][T15550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2731'. [ 437.804221][T15557] 0XD: renamed from gretap0 [ 437.828918][T15557] 0XD: left promiscuous mode [ 437.834587][T15557] 0XD: entered allmulticast mode [ 438.087928][T15572] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2736'. [ 438.239105][T15579] veth1_to_bond: entered allmulticast mode [ 438.270538][T15579] veth1_to_bond: entered promiscuous mode [ 438.289497][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 438.302522][T15584] sctp: [Deprecated]: syz.4.2740 (pid 15584) Use of int in maxseg socket option. [ 438.302522][T15584] Use struct sctp_assoc_value instead [ 438.379831][T15579] veth1_to_bond (unregistering): left allmulticast mode [ 438.407504][T15586] netlink: 'syz.4.2740': attribute type 4 has an invalid length. [ 438.415897][T15579] veth1_to_bond (unregistering): left promiscuous mode [ 438.424202][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.449123][T15579] bond0: (slave bond_slave_1): Releasing backup interface [ 438.553899][T15585] tunl0: entered promiscuous mode [ 438.580244][T15585] netlink: 'syz.2.2739': attribute type 3 has an invalid length. [ 438.589377][T15585] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2739'. [ 438.917220][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 438.933293][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 439.464682][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.144520][T15625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.267267][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.274614][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.504165][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.747943][T15695] ip6tnl0: Caught tx_queue_len zero misconfig [ 441.062552][T15710] netlink: 'syz.0.2767': attribute type 2 has an invalid length. [ 441.149250][T15710] bridge6: entered allmulticast mode [ 441.545217][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.636452][T15731] netlink: 'syz.1.2771': attribute type 8 has an invalid length. [ 441.717486][T15733] lo: entered promiscuous mode [ 441.736453][T15733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.796226][T15735] 0XD: entered promiscuous mode [ 441.850478][T15735] 0XD: left allmulticast mode [ 441.986633][T15746] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 442.062188][T15751] __nla_validate_parse: 8 callbacks suppressed [ 442.062207][T15751] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2779'. [ 442.083116][T15753] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2780'. [ 442.149222][T15755] netlink: 'syz.3.2780': attribute type 3 has an invalid length. [ 442.178487][T15751] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 442.413231][T15768] batman_adv: batadv0: Interface deactivated: wlan0 [ 442.438499][T15772] ip6t_srh: unknown srh invflags 4000 [ 442.444500][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2784'. [ 442.460015][T15770] netlink: zone id is out of range [ 442.483152][T15770] netlink: del zone limit has 4 unknown bytes [ 442.584113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.659874][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 442.694656][T15783] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2791'. [ 442.943329][T15788] netlink: 'syz.3.2792': attribute type 1 has an invalid length. [ 443.097762][T15797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2795'. [ 443.375575][T15820] Bluetooth: ISO socket layer initialized [ 443.626290][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.685705][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 443.708652][T15830] netlink: 'syz.2.2803': attribute type 39 has an invalid length. [ 444.664331][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.704652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.252307][T15811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.495923][T15848] openvswitch: netlink: Flow actions attr not present in new flow. [ 446.508592][T15853] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2811'. [ 446.546868][T15846] netlink: 'syz.3.2808': attribute type 15 has an invalid length. [ 446.744110][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.817534][T15866] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 446.944444][T15870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2816'. [ 447.273641][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2820'. [ 447.302301][T15888] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2821'. [ 447.518581][T15889] netlink: 'syz.2.2822': attribute type 11 has an invalid length. [ 447.550045][T15889] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.2822'. [ 447.784749][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.205168][T15932] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 448.217476][T15929] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 448.288259][T15932] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 448.316089][T15929] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 448.337251][T15938] Bluetooth: hci0: unsupported parameter 5135 [ 448.387176][T15938] Bluetooth: hci0: invalid len left 4, exp >= 247 [ 448.412151][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 448.798298][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2837'. [ 448.824142][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.237264][T15973] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2843'. [ 449.263896][T15974] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2844'. [ 449.275937][T15974] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2844'. [ 449.288752][T15974] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 449.797615][T15999] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 449.865073][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.216134][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 450.229685][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2857'. [ 450.904167][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.133707][T16030] bond9: Invalid ad_actor_system MAC address. [ 451.189708][T16030] bond9: option ad_actor_system: invalid value (1) [ 451.217769][T16030] bond9 (unregistering): Released all slaves [ 451.536887][T16050] netlink: 'syz.0.2864': attribute type 5 has an invalid length. [ 451.553194][T16051] netlink: 'syz.3.2866': attribute type 32 has an invalid length. [ 451.607780][T16049] netlink: 'syz.4.2865': attribute type 6 has an invalid length. [ 451.643440][T16051] bond11: option coupled_control: invalid value (192) [ 451.673866][T16051] bond11 (unregistering): Released all slaves [ 451.945067][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.181291][T16082] ipt_REJECT: TCP_RESET invalid for non-tcp [ 452.288644][T16085] __nla_validate_parse: 8 callbacks suppressed [ 452.288667][T16085] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2876'. [ 452.738050][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 452.755202][T16113] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 452.848936][T16119] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2889'. [ 452.883490][T16113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.901968][T16117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2888'. [ 452.939263][T16120] bond5: (slave geneve2): making interface the new active one [ 452.984335][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.015558][T16120] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 453.032669][T16126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2890'. [ 453.128558][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.165513][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.194752][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.219711][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.249802][T16129] syzkaller0: entered promiscuous mode [ 453.276433][T16129] syzkaller0: entered allmulticast mode [ 453.358093][T16138] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2895'. [ 453.702785][T16152] x_tables: duplicate underflow at hook 2 [ 453.880937][T16161] netlink: 'syz.4.2902': attribute type 20 has an invalid length. [ 453.901280][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 453.922059][T16161] netlink: 'syz.4.2902': attribute type 20 has an invalid length. [ 453.939902][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 454.024859][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.187201][T16167] openvswitch: netlink: IP tunnel TTL not specified. [ 454.241544][T16167] bridge15: entered promiscuous mode [ 454.252330][T16167] bridge15: entered allmulticast mode [ 454.382376][T16169] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2906'. [ 454.615849][T16175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2908'. [ 454.782517][T16181] x_tables: unsorted underflow at hook 1 [ 454.895101][T16189] xt_l2tp: missing protocol rule (udp|l2tpip) [ 454.946754][T16188] xt_l2tp: missing protocol rule (udp|l2tpip) [ 455.009185][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 455.022653][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 455.035043][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 455.045817][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 455.053564][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.064194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.230729][T16191] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 455.368930][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.687565][T16211] netlink: 'syz.3.2918': attribute type 9 has an invalid length. [ 455.743304][T16211] netlink: 'syz.3.2918': attribute type 9 has an invalid length. [ 455.887941][T16218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.105087][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.157895][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.304816][T16233] netlink: Failed to add k\ helper -22 [ 456.319808][T16233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.489335][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.625958][T16250] ipt_ECN: cannot use operation on non-tcp rule [ 456.676300][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.908143][T16253] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 456.966470][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.138204][T16256] syzkaller0: entered promiscuous mode [ 457.144130][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.149603][T16256] syzkaller0: entered allmulticast mode [ 457.157508][ T5621] Bluetooth: hci5: command tx timeout [ 457.732616][T16270] netlink: 'syz.2.2932': attribute type 3 has an invalid length. [ 457.801292][T15415] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 457.816537][T15415] bond0: active interface up! [ 457.851034][T16279] __nla_validate_parse: 13 callbacks suppressed [ 457.851055][T16279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2934'. [ 458.062152][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 458.100268][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2935'. [ 458.184923][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.254059][ T13] bond5 (unregistering): (slave geneve2): Releasing active interface [ 458.317199][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.328562][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.339606][ T13] bond0 (unregistering): Released all slaves [ 458.361275][ T13] bond1 (unregistering): (slave veth7): Releasing active interface [ 458.370280][ T13] bond1 (unregistering): Released all slaves [ 458.389600][ T13] bond2 (unregistering): Released all slaves [ 458.406152][ T13] bond3 (unregistering): Released all slaves [ 458.422736][ T13] bond4 (unregistering): Released all slaves [ 458.472011][ T13] bond5 (unregistering): Released all slaves [ 458.492673][T16190] lo speed is unknown, defaulting to 1000 [ 458.511591][T16286] netlink: 'syz.2.2934': attribute type 1 has an invalid length. [ 458.524433][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 458.817851][ T13] tipc: Left network mode [ 458.931039][T16294] vlan7: entered allmulticast mode [ 458.982398][T16294] bond0: entered allmulticast mode [ 459.026403][T16294] bond_slave_0: entered allmulticast mode [ 459.048961][T16294] syz_tun: entered allmulticast mode [ 459.224252][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.240632][ T5621] Bluetooth: hci5: command tx timeout [ 459.378498][T16309] netlink: 'syz.3.2939': attribute type 2 has an invalid length. [ 459.464908][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2941'. [ 459.606894][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 459.622769][T16319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2944'. [ 460.087868][T16343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2946'. [ 460.266299][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.405785][T15063] block nbd64: NBD_DISCONNECT [ 460.412654][T16327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2944'. [ 460.455655][T16327] nbd: device at index 64 is going down [ 460.466370][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 460.931252][T16369] Cannot find add_set index 46338 as target [ 461.052552][T15063] udevd[15063]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 461.167348][T16369] bridge0: port 1(veth1_to_bridge) entered blocking state [ 461.230262][T16369] bridge0: port 1(veth1_to_bridge) entered disabled state [ 461.269597][T16369] veth1_to_bridge: entered allmulticast mode [ 461.300125][T16369] veth1_to_bridge: entered promiscuous mode [ 461.306351][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.314331][ T5621] Bluetooth: hci5: command tx timeout [ 461.373724][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2955'. [ 461.673763][T16380] syzkaller1: entered promiscuous mode [ 461.723304][T16380] syzkaller1: entered allmulticast mode [ 462.227584][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.245448][T16190] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.263705][T16190] bridge_slave_0: entered allmulticast mode [ 462.321332][T16190] bridge_slave_0: entered promiscuous mode [ 462.345050][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.552289][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 462.578953][T16190] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.597264][T16190] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.614491][T16190] bridge_slave_1: entered allmulticast mode [ 462.652825][T16190] bridge_slave_1: entered promiscuous mode [ 462.753743][T16442] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 463.046394][T16190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.077283][T16190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.157999][ T13] hsr_slave_0: left promiscuous mode [ 463.169626][ T13] hsr_slave_1: left promiscuous mode [ 463.179796][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.190827][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.384223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.392421][ T5621] Bluetooth: hci5: command tx timeout [ 463.587039][T16469] __nla_validate_parse: 4 callbacks suppressed [ 463.587061][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 463.635319][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 463.668786][T16470] netlink: 'syz.4.2974': attribute type 10 has an invalid length. [ 463.687053][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2974'. [ 463.979065][T16470] geneve2: entered promiscuous mode [ 464.024044][T16470] geneve2: entered allmulticast mode [ 464.123181][T16190] team0: Port device team_slave_0 added [ 464.163622][T16190] team0: Port device team_slave_1 added [ 464.335219][T16190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.352834][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.385084][T16488] netlink: NAT attribute has 4 unknown bytes [ 464.392086][T16488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.406804][T16190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.409797][T16487] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2979'. [ 464.426212][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.448784][T16190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.457375][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.498499][T16190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.636395][T16487] netlink: 61 bytes leftover after parsing attributes in process `syz.3.2979'. [ 464.708809][T16497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2982'. [ 464.768408][T16190] hsr_slave_0: entered promiscuous mode [ 464.795171][T16190] hsr_slave_1: entered promiscuous mode [ 464.803165][T16190] debugfs: 'hsr0' already exists in 'hsr' [ 464.816418][T16190] Cannot create hsr debugfs directory [ 464.880738][T16499] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 464.974817][ T13] IPVS: stop unused estimator thread 0... [ 464.996270][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'. [ 465.057437][T16512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.189610][T16507] netlink: 'syz.0.2982': attribute type 1 has an invalid length. [ 465.215584][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2982'. [ 465.464123][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 465.786332][T16542] netlink: 83 bytes leftover after parsing attributes in process `syz.2.2992'. [ 466.086679][T16555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2995'. [ 466.096811][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 466.187576][T16559] netlink: 'syz.2.2997': attribute type 1 has an invalid length. [ 466.329655][T16559] bond11: entered promiscuous mode [ 466.335545][T16559] 8021q: adding VLAN 0 to HW filter on device bond11 [ 466.379734][T16559] bond11: (slave bridge3): making interface the new active one [ 466.387783][T16559] bridge3: entered promiscuous mode [ 466.395414][T16559] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 466.438620][T16560] macvtap0: entered allmulticast mode [ 466.504926][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.615595][T16570] syzkaller1: entered promiscuous mode [ 466.648605][T16570] syzkaller1: entered allmulticast mode [ 467.268055][T16519] lo speed is unknown, defaulting to 1000 [ 467.445189][T16578] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 467.519583][T16190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 467.544294][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.571368][T16190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.603646][T16190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 467.663904][T16190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.687766][T16190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 467.713273][T16190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.728951][T16190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.757310][T16190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.350522][T16190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.379791][T16646] tap0: tun_chr_ioctl cmd 1074025676 [ 468.413577][T16646] tap0: owner set to 0 [ 468.473443][T16646] : renamed from virt_wifi0 [ 468.526498][T16190] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.584775][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.676967][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.684248][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.752248][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.759559][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.066151][T16668] sctp: [Deprecated]: syz.2.3015 (pid 16668) Use of int in max_burst socket option. [ 469.066151][T16668] Use struct sctp_assoc_value instead [ 469.123068][T16668] __nla_validate_parse: 5 callbacks suppressed [ 469.123089][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 469.191479][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 469.624411][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.062448][T16702] netlink: 'syz.2.3022': attribute type 1 has an invalid length. [ 470.091670][T16702] netlink: 'syz.2.3022': attribute type 3 has an invalid length. [ 470.125990][T16702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3022'. [ 470.190425][T16701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3021'. [ 470.202154][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3023'. [ 470.376867][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3024'. [ 470.410678][T16190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.583057][T16190] veth0_vlan: entered promiscuous mode [ 470.630488][T16190] veth1_vlan: entered promiscuous mode [ 470.664774][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.736787][T16190] veth0_macvtap: entered promiscuous mode [ 470.768404][T16190] veth1_macvtap: entered promiscuous mode [ 470.864737][T16190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.929022][T16190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.066467][ T3328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.145553][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.184376][T15415] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.262116][T15415] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.351948][T16740] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 471.491827][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.526892][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.622629][T15415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.657993][T15415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.704136][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.738608][T16763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.765820][T16762] Bluetooth: hci0: unsupported parameter 5135 [ 471.780183][T16762] Bluetooth: hci0: invalid len left 4, exp >= 258 [ 471.940472][T16769] netlink: 'syz.4.3040': attribute type 7 has an invalid length. [ 471.999800][T16769] netlink: 'syz.4.3040': attribute type 8 has an invalid length. [ 472.528479][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.543058][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.556208][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.571633][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.591456][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.744868][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.257061][T16826] bond12: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 473.300637][T16826] bond12 (unregistering): Released all slaves [ 473.312124][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3054'. [ 473.429788][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 473.450380][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 473.480645][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 473.784514][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.230269][T16887] veth1_to_bond: entered promiscuous mode [ 474.447795][T16897] __nla_validate_parse: 1 callbacks suppressed [ 474.447817][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3070'. [ 474.664927][ T5616] Bluetooth: hci2: command tx timeout [ 474.761671][T16912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3074'. [ 474.824776][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.840932][T16914] netlink: 'syz.2.3075': attribute type 3 has an invalid length. [ 474.933349][T16883] veth1_to_bond: left promiscuous mode [ 475.189135][T16929] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 475.361097][T16800] lo speed is unknown, defaulting to 1000 [ 475.671360][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3080'. [ 475.864195][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.973099][T16944] bond9: entered promiscuous mode [ 476.007828][T16944] 8021q: adding VLAN 0 to HW filter on device bond9 [ 476.505825][T16944] 8021q: adding VLAN 0 to HW filter on device bond9 [ 476.520008][T16944] bond9: (slave sit2): The slave device specified does not support setting the MAC address [ 476.533350][T16944] bond9: (slave sit2): Error -95 calling set_mac_address [ 476.702849][T16986] xt_socket: unknown flags 0x50 [ 476.745158][ T5616] Bluetooth: hci2: command tx timeout [ 476.904772][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.153215][T17001] xt_bpf: check failed: parse error [ 477.421829][T17015] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3094'. [ 477.933807][T16800] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.944112][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.987502][T16800] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.019178][T16800] bridge_slave_0: entered allmulticast mode [ 478.043042][T16800] bridge_slave_0: entered promiscuous mode [ 478.067853][T16800] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.086715][T16800] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.094573][T16800] bridge_slave_1: entered allmulticast mode [ 478.102527][T16800] bridge_slave_1: entered promiscuous mode [ 478.257211][T16800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.311435][T16800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.411862][T16800] team0: Port device team_slave_0 added [ 478.420892][T16800] team0: Port device team_slave_1 added [ 478.451679][T17054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 478.480249][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'. [ 478.546590][T16800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.572897][T16800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.623718][T16800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.650756][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'. [ 478.698548][T16800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.721802][T16800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.789413][T16800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.836394][ T5616] Bluetooth: hci2: command tx timeout [ 478.900340][T17065] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 478.985902][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.062287][T16800] hsr_slave_0: entered promiscuous mode [ 479.069351][T16800] hsr_slave_1: entered promiscuous mode [ 479.076995][T16800] debugfs: 'hsr0' already exists in 'hsr' [ 479.083139][T16800] Cannot create hsr debugfs directory [ 479.525070][T16800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.537856][T16800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.783088][T16800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.794334][T16800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.985181][T16800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.003810][T16800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.024315][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.049333][T17099] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 480.457040][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'. [ 480.468213][T17111] netlink: 'syz.4.3122': attribute type 3 has an invalid length. [ 480.524957][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3122'. [ 480.768348][T16800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.804628][T16800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.815316][T16800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.835040][T16800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.884853][T16800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.914297][ T5616] Bluetooth: hci2: command tx timeout [ 480.933763][T16800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.951328][T16800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.009808][T16800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.065728][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 481.288770][T17139] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3130'. [ 481.297010][T16800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.349892][T16800] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.362262][T17144] netlink: 'syz.1.3132': attribute type 10 has an invalid length. [ 481.381702][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.388947][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.438516][T17144] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.508662][T17144] bond0: (slave team0): Enslaving as an active interface with an up link [ 481.561776][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.569062][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.661211][T17152] netlink: 'syz.0.3133': attribute type 13 has an invalid length. [ 481.695452][T17152] macsec0: left promiscuous mode [ 481.721897][T17152] macsec0: entered allmulticast mode [ 481.725491][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 481.940560][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 481.968955][T17162] netlink: 64903 bytes leftover after parsing attributes in process `syz.0.3136'. [ 482.104396][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.201714][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 482.215551][T17172] netlink: 'syz.1.3139': attribute type 11 has an invalid length. [ 482.330142][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 482.372794][T17179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3139'. [ 482.406418][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 483.026638][T17202] netlink: 'syz.4.3147': attribute type 1 has an invalid length. [ 483.145752][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.177117][T17205] hsr_slave_0: left promiscuous mode [ 483.321944][T16800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.450462][T16800] veth0_vlan: entered promiscuous mode [ 483.479304][T17216] 8021q: VLANs not supported on wg2 [ 483.497435][T16800] veth1_vlan: entered promiscuous mode [ 483.622669][T16800] veth0_macvtap: entered promiscuous mode [ 483.650257][T16800] veth1_macvtap: entered promiscuous mode [ 483.709186][T16800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.836476][T16800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.028612][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.065095][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.114788][ T9153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.154901][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.184377][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.335652][ T3328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.357143][ T3328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.496307][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.551836][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.079957][T17265] x_tables: duplicate entry at hook 3 [ 485.224838][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.388579][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.400309][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.412759][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.424504][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.435352][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 485.671670][T17283] netlink: 'syz.1.3166': attribute type 16 has an invalid length. [ 485.704273][T17283] netlink: 'syz.1.3166': attribute type 3 has an invalid length. [ 485.716649][T17283] __nla_validate_parse: 8 callbacks suppressed [ 485.716670][T17283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3166'. [ 485.812119][T17261] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.956993][ T5614] bond0: (slave syz_tun): Releasing backup interface [ 486.162980][T17294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3168'. [ 486.193680][T17296] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3169'. [ 486.217516][T17261] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.264974][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.621777][T17261] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.675526][T17308] veth1_to_bond: entered allmulticast mode [ 486.829521][T17261] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.873327][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3175'. [ 486.885828][T17308] veth1_to_bond: left allmulticast mode [ 487.219355][T17324] vlan8: entered promiscuous mode [ 487.305687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.427954][T17327] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 487.489014][T17333] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 487.546798][ T5621] Bluetooth: hci4: command tx timeout [ 487.560565][ T3328] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.744449][ T3328] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.769120][ T3328] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.778262][T17343] Bluetooth: hci0: unsupported parameter 5135 [ 487.801612][T17343] Bluetooth: hci0: unsupported parameter 8192 [ 487.821988][T17343] Bluetooth: hci0: unsupported parameter 5135 [ 487.851832][T17343] Bluetooth: hci0: unsupported parameter 8192 [ 487.884752][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.337954][T17355] netlink: 'syz.1.3184': attribute type 12 has an invalid length. [ 488.344490][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.750524][T17273] lo speed is unknown, defaulting to 1000 [ 488.775055][T17361] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 488.793147][T17361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.170853][T17375] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 489.384925][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.401128][T17382] Bluetooth: hci0: unsupported parameter 5135 [ 489.414236][T17382] Bluetooth: hci0: unsupported parameter 8192 [ 489.428642][T17382] Bluetooth: hci0: unsupported parameter 5135 [ 489.449015][T17382] Bluetooth: hci0: unsupported parameter 8192 [ 489.624492][ T5621] Bluetooth: hci4: command tx timeout [ 489.651089][T17385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3193'. [ 490.213702][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 490.268738][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 490.330272][T17411] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 490.343795][T17415] Bluetooth: hci0: unsupported parameter 5135 [ 490.371364][T17415] Bluetooth: hci0: unsupported parameter 8192 [ 490.391601][T17415] Bluetooth: hci0: unsupported parameter 5135 [ 490.412797][T17415] Bluetooth: hci0: unsupported parameter 8192 [ 490.424274][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.637220][T17422] : renamed from dummy0 (while UP) [ 490.707905][T17273] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.724461][T17273] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.733533][T17273] bridge_slave_0: entered allmulticast mode [ 490.750021][T17273] bridge_slave_0: entered promiscuous mode [ 490.766184][T17273] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.773641][T17273] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.781159][T17273] bridge_slave_1: entered allmulticast mode [ 490.790000][T17273] bridge_slave_1: entered promiscuous mode [ 490.892169][T17273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.932014][T17273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.055961][T17463] netlink: 'syz.0.3209': attribute type 1 has an invalid length. [ 491.090095][T17273] team0: Port device team_slave_0 added [ 491.201721][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3209'. [ 491.256483][T17463] 8021q: adding VLAN 0 to HW filter on device bond10 [ 491.275731][T17273] team0: Port device team_slave_1 added [ 491.378324][T17463] 8021q: adding VLAN 0 to HW filter on device bond11 [ 491.417914][T17273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.433193][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.467126][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.478410][T17273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.589593][T17477] bond10: (slave geneve3): making interface the new active one [ 491.607309][T17512] netlink: 'syz.4.3212': attribute type 19 has an invalid length. [ 491.638487][T17477] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 491.651576][T17512] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 491.660940][T17273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.668565][T17512] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 491.690845][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.721662][ T5621] Bluetooth: hci4: command tx timeout [ 491.783529][T17273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.136059][T17273] hsr_slave_0: entered promiscuous mode [ 492.228026][T17273] hsr_slave_1: entered promiscuous mode [ 492.236711][T17273] debugfs: 'hsr0' already exists in 'hsr' [ 492.262868][T17273] Cannot create hsr debugfs directory [ 492.514916][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.323717][T17580] FAULT_INJECTION: forcing a failure. [ 493.323717][T17580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.337612][T17580] CPU: 1 UID: 0 PID: 17580 Comm: syz.0.3220 Not tainted syzkaller #0 PREEMPT(full) [ 493.337647][T17580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.337662][T17580] Call Trace: [ 493.337670][T17580] [ 493.337679][T17580] dump_stack_lvl+0xe8/0x150 [ 493.337716][T17580] should_fail_ex+0x410/0x560 [ 493.337762][T17580] _copy_to_user+0x31/0xb0 [ 493.337792][T17580] simple_read_from_buffer+0xe1/0x170 [ 493.337829][T17580] proc_fail_nth_read+0x1bb/0x230 [ 493.337906][T17580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.337943][T17580] ? rw_verify_area+0x24a/0x4c0 [ 493.337975][T17580] ? tun_chr_write_iter+0x18a/0x200 [ 493.338090][T17580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.338123][T17580] vfs_read+0x213/0xa80 [ 493.338161][T17580] ? __pfx___mutex_lock+0x10/0x10 [ 493.338191][T17580] ? __pfx_vfs_read+0x10/0x10 [ 493.338223][T17580] ? __fget_files+0x2a/0x420 [ 493.338256][T17580] ? __fget_files+0x3a2/0x420 [ 493.338283][T17580] ? __fget_files+0x2a/0x420 [ 493.338320][T17580] ksys_read+0x150/0x270 [ 493.338352][T17580] ? __pfx_ksys_read+0x10/0x10 [ 493.338397][T17580] do_syscall_64+0x166/0x520 [ 493.338423][T17580] ? trace_irq_disable+0x3b/0x140 [ 493.338452][T17580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.338474][T17580] ? clear_bhb_loop+0x70/0xc0 [ 493.338502][T17580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.338524][T17580] RIP: 0033:0x7faa85b5e90e [ 493.338546][T17580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 493.338565][T17580] RSP: 002b:00007faa86a0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.338587][T17580] RAX: ffffffffffffffda RBX: 00007faa86a0b6c0 RCX: 00007faa85b5e90e [ 493.338602][T17580] RDX: 000000000000000f RSI: 00007faa86a0b0a0 RDI: 0000000000000004 [ 493.338616][T17580] RBP: 00007faa86a0b090 R08: 0000000000000000 R09: 0000000000000000 [ 493.338629][T17580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.338642][T17580] R13: 00007faa85e26038 R14: 00007faa85e25fa0 R15: 00007ffeb0523558 [ 493.338678][T17580] [ 493.546112][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.794878][ T5621] Bluetooth: hci4: command tx timeout [ 494.058364][T17273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.106071][T17273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 494.139320][T17273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.499108][T17273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.519292][T17273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 494.554493][T17273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.584369][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.707866][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'. [ 494.756132][T17622] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3232'. [ 494.768239][T17622] tipc: Invalid UDP bearer configuration [ 494.768296][T17622] tipc: Enabling of bearer rejected, failed to enable media [ 494.895881][T17629] netlink: 83 bytes leftover after parsing attributes in process `syz.0.3233'. [ 494.929249][T17273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.940202][T17273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 494.952041][T17273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.104637][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 495.301211][T17273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.352055][T17273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 495.365724][T17273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.482405][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 495.625116][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.851933][T17649] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3240'. [ 495.962013][T17649] syzkaller1: entered promiscuous mode [ 495.987753][T17649] syzkaller1: entered allmulticast mode [ 496.083140][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'. [ 496.093661][T17657] openvswitch: netlink: Message has 4 unknown bytes. [ 496.101086][T17658] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 496.377344][T17672] Bluetooth: hci0: unsupported parameter 5135 [ 496.387939][T17672] Bluetooth: hci0: unsupported parameter 8192 [ 496.394745][T17672] Bluetooth: hci0: unsupported parameter 5135 [ 496.401001][T17672] Bluetooth: hci0: unsupported parameter 8192 [ 496.636029][T17684] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3249'. [ 496.664120][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.726310][T15415] tipc: Subscription rejected, illegal request [ 496.797607][T17681] xt_SECMARK: invalid mode: 9 [ 496.806286][T17677] syzkaller0: entered promiscuous mode [ 496.819791][T17677] syzkaller0: entered allmulticast mode [ 496.881564][T17680] netlink: 'syz.0.3246': attribute type 14 has an invalid length. [ 496.903436][T17273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.911701][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3246'. [ 496.930154][T17273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.939787][T17273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.982706][T17273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.010062][T17680] netlink: 'syz.0.3246': attribute type 14 has an invalid length. [ 497.021896][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3246'. [ 497.075732][T17273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 497.089723][T17273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.114866][T17273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 497.142349][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 497.158110][T17273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.428026][T17714] Bluetooth: hci0: unsupported parameter 5135 [ 497.453209][T17714] Bluetooth: hci0: unsupported parameter 8192 [ 497.480358][T17714] Bluetooth: hci0: unsupported parameter 5135 [ 497.488861][T17273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.521725][T17714] Bluetooth: hci0: unsupported parameter 8192 [ 497.637063][T17273] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.679677][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.686977][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.703050][T17724] netlink: 'syz.3.3259': attribute type 1 has an invalid length. [ 497.706666][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.732029][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.739313][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.762059][T17726] sctp: [Deprecated]: syz.4.3260 (pid 17726) Use of int in maxseg socket option. [ 497.762059][T17726] Use struct sctp_assoc_value instead [ 498.332110][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 498.352095][T17752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3266'. [ 498.648187][T17765] Bluetooth: hci0: unsupported parameter 5135 [ 498.677686][T17765] Bluetooth: hci0: unsupported parameter 8192 [ 498.698821][T17765] Bluetooth: hci0: unsupported parameter 5135 [ 498.740055][T17765] Bluetooth: hci0: unsupported parameter 8192 [ 498.745090][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.027412][T17779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.098989][T17711] lo speed is unknown, defaulting to 1000 [ 499.216194][T17273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.361359][T17273] veth0_vlan: entered promiscuous mode [ 499.402491][T17273] veth1_vlan: entered promiscuous mode [ 499.494326][T17273] veth0_macvtap: entered promiscuous mode [ 499.531259][T17273] veth1_macvtap: entered promiscuous mode [ 499.648667][T17273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.712233][T17798] Bluetooth: hci0: unsupported parameter 5135 [ 499.724417][ T146] IPVS: starting estimator thread 0... [ 499.730787][T17798] Bluetooth: hci0: unsupported parameter 8192 [ 499.741303][T17798] Bluetooth: hci0: unsupported parameter 5135 [ 499.754241][T17798] Bluetooth: hci0: unsupported parameter 8192 [ 499.767140][T17273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.785673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.846130][T17800] IPVS: using max 30 ests per chain, 72000 per kthread [ 499.926731][T17810] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 499.936977][T17810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.038588][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.097887][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.149689][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.192401][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.375254][ T3272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.392482][ T3272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.429917][T17823] Bluetooth: hci0: unsupported parameter 5134 [ 500.445019][T17823] Bluetooth: hci0: unsupported parameter 8192 [ 500.451421][T17823] Bluetooth: hci0: unsupported parameter 5134 [ 500.484393][T17823] Bluetooth: hci0: unsupported parameter 8192 [ 500.629475][T15415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.673673][T15415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.740785][T17833] Bluetooth: hci0: unsupported parameter 5135 [ 500.765722][T17833] Bluetooth: hci0: unsupported parameter 8192 [ 500.783988][T17833] Bluetooth: hci0: unsupported parameter 5135 [ 500.798123][T17833] Bluetooth: hci0: unsupported parameter 8192 [ 500.824388][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.060437][T17845] netlink: 'syz.2.3163': attribute type 5 has an invalid length. [ 501.087829][T17846] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.131686][T17845] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3163'. [ 501.162354][T17847] netlink: 'syz.2.3163': attribute type 1 has an invalid length. [ 501.171447][T17840] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.196012][T17849] xt_hashlimit: size too large, truncated to 1048576 [ 501.248654][T17851] atomic_op ffff88802b0c29e0 conn xmit_atomic 0000000000000000 [ 501.616703][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 501.630991][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 501.640549][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 501.649795][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 501.664215][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 501.716525][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.725499][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.864635][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.149122][T17869] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 502.543305][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3307'. [ 502.577251][T17890] netlink: 'syz.2.3308': attribute type 6 has an invalid length. [ 502.606686][T17892] xt_hashlimit: size too large, truncated to 1048576 [ 502.803785][T17905] netlink: 'syz.2.3312': attribute type 2 has an invalid length. [ 502.840362][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3313'. [ 502.891913][T17909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3313'. [ 502.904148][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.962146][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3314'. [ 503.273499][T17927] netlink: 'syz.2.3319': attribute type 11 has an invalid length. [ 503.293123][T17927] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3319'. [ 503.418936][T17931] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3320'. [ 503.784042][ T5621] Bluetooth: hci3: command tx timeout [ 503.944675][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.269950][T17854] lo speed is unknown, defaulting to 1000 [ 504.432211][T17967] netlink: 'syz.3.3332': attribute type 2 has an invalid length. [ 504.445356][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 504.458290][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3332'. [ 504.638922][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3333'. [ 504.760185][T17980] ip_tables: iptables: counters copy to user failed while replacing table [ 504.984369][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.159588][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 505.308459][T18011] netlink: 'syz.3.3342': attribute type 21 has an invalid length. [ 505.330266][T18011] netlink: 'syz.3.3342': attribute type 6 has an invalid length. [ 505.689478][T17854] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.720426][T17854] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.744486][T17854] bridge_slave_0: entered allmulticast mode [ 505.759062][T17854] bridge_slave_0: entered promiscuous mode [ 505.778810][T17854] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.817410][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.838289][T17854] bridge_slave_1: entered allmulticast mode [ 505.852543][T17854] bridge_slave_1: entered promiscuous mode [ 505.869590][ T5621] Bluetooth: hci3: command tx timeout [ 505.919499][T18033] netlink: 'syz.3.3347': attribute type 3 has an invalid length. [ 505.940772][T17854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.959585][T17854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.024832][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.053859][T17854] team0: Port device team_slave_0 added [ 506.086026][T17854] team0: Port device team_slave_1 added [ 506.191058][T18035] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZJI % [ 506.210961][T17854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.219456][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.245985][T17854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.259008][T17854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.276449][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.334034][T17854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.349429][T18041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 506.615164][T17854] hsr_slave_0: entered promiscuous mode [ 506.621812][T17854] hsr_slave_1: entered promiscuous mode [ 506.629592][T17854] debugfs: 'hsr0' already exists in 'hsr' [ 506.635505][T17854] Cannot create hsr debugfs directory [ 506.719837][T18053] netlink: 'syz.2.3353': attribute type 6 has an invalid length. [ 506.739889][T18053] netlink: 'syz.2.3353': attribute type 6 has an invalid length. [ 507.051683][T17854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.064167][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.092180][T17854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.282241][T18076] netlink: 'syz.2.3360': attribute type 13 has an invalid length. [ 507.324932][T18076] netlink: 'syz.2.3360': attribute type 58 has an invalid length. [ 507.428186][T17854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.441839][T17854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.471154][T18082] sctp: [Deprecated]: syz.3.3362 (pid 18082) Use of int in max_burst socket option. [ 507.471154][T18082] Use struct sctp_assoc_value instead [ 507.641972][T18089] __nla_validate_parse: 12 callbacks suppressed [ 507.641995][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 507.709472][T17854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.730561][T17854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.752617][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3365'. [ 507.814754][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 507.854241][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 507.926273][T17854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.940200][T17854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.952112][ T5616] Bluetooth: hci3: command tx timeout [ 508.000434][T18104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3365'. [ 508.016280][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3369'. [ 508.026000][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3369'. [ 508.042279][T18088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3364'. [ 508.105271][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.258809][T18112] validate_nla: 1 callbacks suppressed [ 508.258828][T18112] netlink: 'syz.3.3372': attribute type 21 has an invalid length. [ 508.727974][T18135] netlink: 'syz.0.3381': attribute type 83 has an invalid length. [ 508.770998][T17854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 508.799602][T17854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.825947][T17854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 508.867730][T17854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.916565][T17854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 508.949318][T17854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.958398][T18143] xt_l2tp: wrong L2TP version: 0 [ 508.970027][T17854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.005169][T17854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.144109][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.259984][T18162] netlink: 'syz.2.3388': attribute type 12 has an invalid length. [ 509.269488][T18164] netlink: 'syz.2.3388': attribute type 12 has an invalid length. [ 509.323792][T17854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.450441][T17854] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.480781][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.488079][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.580266][T18171] gtp0: entered promiscuous mode [ 509.593673][T18171] gtp0: entered allmulticast mode [ 509.622098][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.629346][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.708784][T18177] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 509.750999][T18177] bond12 (unregistering): Released all slaves [ 510.026569][ T5616] Bluetooth: hci3: command 0x0419 tx timeout [ 510.184888][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.232299][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3396'. [ 510.767771][ T146] IPVS: starting estimator thread 0... [ 510.865584][T18218] IPVS: using max 27 ests per chain, 64800 per kthread [ 511.002535][T17854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.224146][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.450740][T18211] netlink: 'syz.3.3401': attribute type 4 has an invalid length. [ 511.578228][T18250] netlink: 'syz.2.3408': attribute type 178 has an invalid length. [ 511.751865][T18258] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3410'. [ 511.937990][T17854] veth0_vlan: entered promiscuous mode [ 511.987701][T17854] veth1_vlan: entered promiscuous mode [ 512.069803][T18267] netlink: 'syz.3.3412': attribute type 3 has an invalid length. [ 512.091248][T18267] netlink: 'syz.3.3412': attribute type 3 has an invalid length. [ 512.105157][ T5621] Bluetooth: hci3: command 0x0419 tx timeout [ 512.179349][T17854] veth0_macvtap: entered promiscuous mode [ 512.191794][T17854] veth1_macvtap: entered promiscuous mode [ 512.227858][T17854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.239851][T17854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.264730][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.315259][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.360010][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.473260][T18282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.566937][ T3272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.760000][ T3272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.768021][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.807734][ T3272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.844920][ T3272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.858676][ T3272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.063785][T18306] netlink: 'syz.4.3300': attribute type 2 has an invalid length. [ 513.145979][T18313] netlink: 'syz.1.3426': attribute type 17 has an invalid length. [ 513.157316][T18313] __nla_validate_parse: 4 callbacks suppressed [ 513.157336][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 513.175088][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3426'. [ 513.195996][T18313] gretap0: entered promiscuous mode [ 513.213006][T18313] gretap0: left promiscuous mode [ 513.231806][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3427'. [ 513.267904][T18319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3428'. [ 513.304194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 513.516335][T18320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3427'. [ 513.568195][T18320] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.716060][T18337] netlink: 'syz.1.3431': attribute type 2 has an invalid length. [ 513.994466][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.013505][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.023647][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.032420][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.041060][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 514.068823][T18352] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3434'. [ 514.339787][ T5611] bond0: (slave syz_tun): Releasing backup interface [ 514.346559][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.398891][ T5611] syz_tun (unregistering): left allmulticast mode [ 514.469341][ T5621] block nbd5: Receive control failed (result -32) [ 514.686523][T18379] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 514.739919][T18380] sctp: [Deprecated]: syz.4.3440 (pid 18380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.739919][T18380] Use struct sctp_sack_info instead [ 514.813784][T18375] syzkaller0: entered promiscuous mode [ 514.838732][T18375] syzkaller0: entered allmulticast mode [ 514.855380][T18389] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3438'. [ 514.919060][T18389] gretap1: entered promiscuous mode [ 514.958970][T18389] batman_adv: batadv0: Adding interface: gretap1 [ 514.981242][T18389] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 515.006837][T18389] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 515.093692][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3442'. [ 515.262658][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3445'. [ 515.275388][T18404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3444'. [ 515.384312][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.106705][ T5621] Bluetooth: hci0: command tx timeout [ 516.425918][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.464134][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.201193][ T5621] Bluetooth: hci0: command tx timeout [ 518.511958][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.671365][ T5274] veth1_vlan: left promiscuous mode [ 518.682259][T18407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3445'. [ 519.359651][T18464] netlink: 'syz.3.3459': attribute type 1 has an invalid length. [ 519.434832][T18468] tc_dump_action: action bad kind [ 519.544093][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.579474][T18472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3462'. [ 519.844741][T18485] netlink: 'syz.3.3465': attribute type 1 has an invalid length. [ 519.888469][T18477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3462'. [ 519.959555][T18477] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.264143][ T5621] Bluetooth: hci0: command tx timeout [ 520.278755][T18497] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3467'. [ 520.319160][T18349] lo speed is unknown, defaulting to 1000 [ 520.584834][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.099868][T18536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3476'. [ 521.117008][T18536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3476'. [ 521.155047][T18536] erspan0: entered promiscuous mode [ 521.161550][T18536] gretap0: entered promiscuous mode [ 521.414958][T18550] 0: reclassify loop, rule prio 0, protocol 03 [ 521.624089][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.699025][T18557] netlink: 'syz.2.3483': attribute type 20 has an invalid length. [ 521.712022][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 521.745694][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3485'. [ 521.791059][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3485'. [ 521.800488][T18349] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.808516][T18557] netlink: 'syz.2.3483': attribute type 20 has an invalid length. [ 521.816806][T18349] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.824629][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 521.833785][T18349] bridge_slave_0: entered allmulticast mode [ 521.842792][T18349] bridge_slave_0: entered promiscuous mode [ 521.854659][ T9153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.875903][ T9153] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.901808][T18349] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.933777][T18349] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.966745][T18349] bridge_slave_1: entered allmulticast mode [ 521.975124][T18349] bridge_slave_1: entered promiscuous mode [ 522.047006][T18349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.064418][T18323] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.087935][T18349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.140586][T18576] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.160835][T18576] bridge_slave_0 (unregistering): left allmulticast mode [ 522.171134][T18576] bridge_slave_0 (unregistering): left promiscuous mode [ 522.179223][T18576] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.224795][T18349] team0: Port device team_slave_0 added [ 522.238112][T18582] syzkaller1: entered promiscuous mode [ 522.247159][T18582] syzkaller1: entered allmulticast mode [ 522.273740][T18349] team0: Port device team_slave_1 added [ 522.408754][T18349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.432414][T18349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.476006][T18349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.504267][T18591] gre0: entered allmulticast mode [ 522.540205][T18349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.565570][T18349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.640575][T18349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.664629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 522.709157][T18597] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 522.849810][T18349] hsr_slave_0: entered promiscuous mode [ 522.887773][T18349] hsr_slave_1: entered promiscuous mode [ 522.895113][T18349] debugfs: 'hsr0' already exists in 'hsr' [ 522.900996][T18349] Cannot create hsr debugfs directory [ 523.005755][ T9153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.591738][T18349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 523.604443][T18349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 523.618174][T18349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.650559][T18639] SET target dimension over the limit! [ 523.696157][T18633] openvswitch: netlink: IP tunnel dst address not specified [ 523.704687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.715305][T18633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.738268][T18633] syzkaller0: entered promiscuous mode [ 523.753993][T18633] syzkaller0: entered allmulticast mode [ 523.770175][T18633] tipc: Started in network mode [ 523.787501][T18633] tipc: Node identity 92d682065a73, cluster identity 4711 [ 523.804939][T18633] tipc: Enabled bearer , priority 0 [ 523.828585][T18649] __nla_validate_parse: 67 callbacks suppressed [ 523.828608][T18649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3507'. [ 523.870356][T18349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 523.885205][T18349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 523.898169][T18349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.031048][T18657] tipc: Enabling not permitted [ 524.045844][T18657] tipc: Enabling of bearer rejected, failed to enable media [ 524.103212][T18349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 524.121613][T18349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 524.146839][T18349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.319877][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3513'. [ 524.341053][T18349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 524.355223][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3513'. [ 524.366396][T18349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 524.380737][T18349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.435557][T18632] tipc: Resetting bearer [ 524.507892][T18632] tipc: Disabling bearer [ 524.746412][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.870738][T18701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3519'. [ 524.921077][T18697] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3519'. [ 524.996395][T18349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 525.020864][T18349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 525.041130][T18697] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3519'. [ 525.041714][T18349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 525.094903][T18349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 525.103392][T18697] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3519'. [ 525.110295][T18349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 525.130037][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3521'. [ 525.153236][T18349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 525.168803][T18715] netlink: NAT attribute has 1 unknown bytes [ 525.178333][T18349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 525.194458][T18715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.213306][T18349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.246173][T18697] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3519'. [ 525.295738][T18697] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3519'. [ 525.789718][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.831028][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.864149][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.519476][T18349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.598107][T18349] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.649282][T18323] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.656503][T18323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.672975][T18755] Cannot find del_set index 3 as target [ 528.686573][T18325] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.693809][T18325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.707268][T18323] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 528.733418][T18755] xfrm1: entered promiscuous mode [ 528.740116][T18755] xfrm1: entered allmulticast mode [ 528.859141][T18762] __nla_validate_parse: 29 callbacks suppressed [ 528.859163][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 528.902227][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 528.906430][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.931783][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 528.958153][T18767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3534'. [ 528.981141][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 528.997903][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 529.049124][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 529.063297][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 529.099186][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 529.137172][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 529.488154][T18792] ip_tables: iptables: counters copy to user failed while replacing table [ 529.543733][T18793] ip_tables: iptables: counters copy to user failed while replacing table [ 529.756064][T18349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.840692][T18349] veth0_vlan: entered promiscuous mode [ 529.862926][T18349] veth1_vlan: entered promiscuous mode [ 529.935681][T18349] veth0_macvtap: entered promiscuous mode [ 529.944345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.958210][T18349] veth1_macvtap: entered promiscuous mode [ 529.995074][T18349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.016897][T18349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.094628][ T9153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.117719][ T9153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.167452][ T9153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.196278][ T9153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.984628][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.551502][T18746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.683542][T18327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.719819][T18327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.970925][T18844] xt_TCPMSS: Only works on TCP SYN packets [ 532.024132][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.130650][T18844] bond1: Unable to set down delay as MII monitoring is disabled [ 532.147309][T18844] bond1 (unregistering): Released all slaves [ 532.213644][T18325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.262701][T18325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.342052][T18864] netlink: 'syz.1.3559': attribute type 4 has an invalid length. [ 532.605786][T18871] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 532.755025][ T9153] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 532.793586][T18876] syzkaller0: entered promiscuous mode [ 532.818245][T18876] syzkaller0: entered allmulticast mode [ 533.065744][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.104161][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.144953][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.651539][T18877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.910254][T18926] __nla_validate_parse: 68 callbacks suppressed [ 535.910279][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3571'. [ 535.934320][T18928] netlink: 'syz.1.3574': attribute type 1 has an invalid length. [ 536.094884][T18928] bond1: entered promiscuous mode [ 536.100195][T18928] bond1: entered allmulticast mode [ 536.106275][T18928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.134537][T18938] erspan1: entered allmulticast mode [ 536.151095][T18938] bond1: (slave erspan1): making interface the new active one [ 536.159404][T18938] erspan1: entered promiscuous mode [ 536.169919][T18938] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 536.176732][T18944] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3577'. [ 536.188067][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.222982][T19001] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3593'. [ 537.225774][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.313515][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 537.332068][T19002] netlink: 'syz.3.3594': attribute type 26 has an invalid length. [ 537.479492][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3597'. [ 537.522791][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3600'. [ 537.600581][T19018] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 537.612972][T19018] gretap1: entered promiscuous mode [ 537.626312][T19018] gretap1: entered allmulticast mode [ 537.820297][T19034] bond2 (unregistering): Released all slaves [ 537.876737][T19042] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 537.922252][T19039] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.983839][T19039] bridge_slave_0 (unregistering): left allmulticast mode [ 537.991627][T19039] bridge_slave_0 (unregistering): left promiscuous mode [ 538.022981][T19039] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.264086][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.462905][T19071] bond0: Error: CAN devices cannot be enslaved [ 538.481270][T19074] netlink: 'syz.2.3614': attribute type 21 has an invalid length. [ 538.522260][T19076] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3617'. [ 538.525647][T19074] ieee802154 phy0 wpan0: encryption failed: -22 [ 538.730180][ T5621] block nbd6: Receive control failed (result -32) [ 538.861929][T19093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3622'. [ 538.963174][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'. [ 538.980139][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'. [ 539.304612][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.473197][T19132] netlink: 'syz.4.3632': attribute type 1 has an invalid length. [ 539.919539][T19154] syzkaller0: entered promiscuous mode [ 539.941543][T19154] syzkaller0: entered allmulticast mode [ 540.344112][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.949848][T19222] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 540.969188][T19228] netlink: 'syz.1.3664': attribute type 10 has an invalid length. [ 541.059891][T19228] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 541.079296][T19228] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 541.097976][T19232] __nla_validate_parse: 7 callbacks suppressed [ 541.097996][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3665'. [ 541.331009][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 541.388333][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.415358][T19238] netlink: 'syz.2.3667': attribute type 1 has an invalid length. [ 541.452203][T19238] netlink: 'syz.2.3667': attribute type 2 has an invalid length. [ 541.556533][T19242] openvswitch: netlink: Missing key (keys=40, expected=100) [ 541.569753][T19243] openvswitch: netlink: Missing key (keys=40, expected=100) [ 542.432424][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.467188][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.518577][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.545496][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.588744][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.638144][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.674513][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.714757][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.748992][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.794570][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.830874][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.868095][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.910232][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.948381][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.987244][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.032819][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.064107][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.106940][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.149660][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.184676][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.231988][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.264917][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.308225][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.359011][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.510148][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.677545][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.395600][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.430058][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.468383][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.512360][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.554658][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.586076][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.634886][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.675194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.713737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.746353][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.796761][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.835436][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.870498][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.913795][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 581.949976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 582.992278][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.034766][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.067578][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 586.104545][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 587.157412][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 588.204005][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.228809][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.278529][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.318391][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.352246][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 593.389832][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 594.435068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.465885][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 596.512956][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 597.549865][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.591142][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 599.627482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.673281][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.707541][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.744074][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 603.797781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.825169][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.879404][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 606.915207][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.952146][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 608.995424][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 610.031833][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 611.079781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.105530][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 613.144145][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 614.189583][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.236121][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 616.267165][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 617.308538][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.347888][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.394047][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.429972][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 621.468294][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 622.512637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 623.552314][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.598982][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.638035][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.660848][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.681882][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.674834][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 627.712518][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 628.750550][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.797417][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 630.838742][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 631.870315][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.909741][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 633.959812][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 634.999634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 636.028278][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 637.076989][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 638.114305][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 639.146689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 640.199053][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 641.227399][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.270610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 643.315152][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.351692][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 645.073197][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.397716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.437317][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 647.478684][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 648.510817][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.549088][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 650.590694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 651.629731][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.669033][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 653.706141][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 654.757076][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 655.788234][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 656.826045][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 656.873886][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 656.880926][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19275/1:b..l P19279/1:b..l P19278/1:b..l [ 656.891984][ C1] rcu: (detected by 1, t=10503 jiffies, g=97393, q=903194 ncpus=2) [ 656.900028][ C1] task:syz.3.3682 state:R running task stack:28744 pid:19278 tgid:19275 ppid:16800 task_flags:0x400040 flags:0x00080000 [ 656.914896][ C1] Call Trace: [ 656.918218][ C1] [ 656.921193][ C1] __schedule+0x17d4/0x5630 [ 656.925753][ C1] ? __lock_acquire+0x683/0x2cf0 [ 656.930760][ C1] ? __lock_acquire+0x683/0x2cf0 [ 656.935770][ C1] ? __pfx___schedule+0x10/0x10 [ 656.940685][ C1] preempt_schedule_irq+0x4b/0x90 [ 656.945764][ C1] irqentry_exit+0x14f/0x910 [ 656.950412][ C1] ? trace_irq_disable+0x3b/0x140 [ 656.955500][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.961525][ C1] RIP: 0010:unwind_next_frame+0x11df/0x2550 [ 656.967543][ C1] Code: 89 3b 43 0f b6 44 25 00 84 c0 0f 85 29 11 00 00 49 8d 46 36 c6 00 00 49 8d 5e 50 4c 8b 6c 24 18 48 8b 44 24 30 42 0f b6 04 20 <84> c0 4c 8b 04 24 0f 85 46 0e 00 00 42 0f b6 44 25 00 84 c0 0f 85 [ 656.987193][ C1] RSP: 0018:ffffc9000d9c7680 EFLAGS: 00000246 [ 656.993312][ C1] RAX: 0000000000000000 RBX: ffffc9000d9c7778 RCX: 0000000000000000 [ 657.001327][ C1] RDX: ffffffff9123d804 RSI: 0000000000000000 RDI: ffffc9000d9c7788 [ 657.009344][ C1] RBP: 1ffffffff2247b00 R08: ffffc9000d9c7787 R09: 0000000000000000 [ 657.017396][ C1] R10: ffffc9000d9c7778 R11: fffff52001b38ef1 R12: dffffc0000000000 [ 657.025417][ C1] R13: ffffffff9123d800 R14: ffffc9000d9c7728 R15: ffffc9000d9c7770 [ 657.033746][ C1] ? security_file_ioctl+0xc3/0x2a0 [ 657.039094][ C1] ? unwind_next_frame+0x8f/0x2550 [ 657.044255][ C1] ? __kmalloc_noprof+0x1af/0x720 [ 657.049367][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 657.055610][ C1] arch_stack_walk+0x11b/0x150 [ 657.060468][ C1] ? __se_sys_ioctl+0x47/0x170 [ 657.065319][ C1] stack_trace_save+0xa9/0x100 [ 657.070169][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 657.075611][ C1] kasan_save_track+0x3e/0x80 [ 657.080339][ C1] ? kasan_save_track+0x3e/0x80 [ 657.085233][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 657.090044][ C1] ? __kmalloc_noprof+0x379/0x720 [ 657.095120][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 657.100977][ C1] ? tomoyo_path_number_perm+0x246/0x5f0 [ 657.106715][ C1] ? security_file_ioctl+0xc3/0x2a0 [ 657.112025][ C1] ? __kmalloc_noprof+0x1af/0x720 [ 657.117109][ C1] __kasan_kmalloc+0x93/0xb0 [ 657.121759][ C1] __kmalloc_noprof+0x379/0x720 [ 657.126676][ C1] ? rcu_is_watching+0x16/0xb0 [ 657.131548][ C1] ? __kmalloc_noprof+0x1af/0x720 [ 657.136623][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 657.142383][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 657.148167][ C1] tomoyo_realpath_from_path+0xef/0x640 [ 657.153780][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 657.159481][ C1] tomoyo_path_number_perm+0x246/0x5f0 [ 657.165009][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 657.171056][ C1] ? __lock_acquire+0x683/0x2cf0 [ 657.176066][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 657.181154][ C1] ? hook_file_ioctl+0x1f0/0x5f0 [ 657.186255][ C1] ? __fget_files+0x2a/0x420 [ 657.190906][ C1] ? __fget_files+0x2a/0x420 [ 657.195561][ C1] ? __fget_files+0x3a2/0x420 [ 657.200287][ C1] ? __fget_files+0x2a/0x420 [ 657.204932][ C1] security_file_ioctl+0xc3/0x2a0 [ 657.210017][ C1] __se_sys_ioctl+0x47/0x170 [ 657.214656][ C1] do_syscall_64+0x166/0x520 [ 657.219297][ C1] ? trace_irq_disable+0x3b/0x140 [ 657.224370][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.230484][ C1] ? clear_bhb_loop+0x70/0xc0 [ 657.235226][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.241165][ C1] RIP: 0033:0x7f998a59dd6b [ 657.245620][ C1] RSP: 002b:00007f998b4ef050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.254083][ C1] RAX: ffffffffffffffda RBX: 00007f998a826218 RCX: 00007f998a59dd6b [ 657.262101][ C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000da [ 657.270132][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f998b4ef6c0 [ 657.278151][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 657.286170][ C1] R13: 00007f998a826218 R14: 00007ffcffddc1c0 R15: 00007ffcffddc2a8 [ 657.294209][ C1] [ 657.297259][ C1] task:syz.3.3682 state:R running task stack:27752 pid:19279 tgid:19275 ppid:16800 task_flags:0x400040 flags:0x00080000 [ 657.310814][ C1] Call Trace: [ 657.314135][ C1] [ 657.317103][ C1] __schedule+0x17d4/0x5630 [ 657.321652][ C1] ? ___slab_alloc+0x16a/0x950 [ 657.326470][ C1] ? call_rcu+0x43/0x8b0 [ 657.330801][ C1] ? qlist_free_all+0x99/0x100 [ 657.335615][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 657.341296][ C1] ? sk_alloc+0x3a/0x390 [ 657.345599][ C1] ? __lock_acquire+0x683/0x2cf0 [ 657.350607][ C1] ? __pfx___schedule+0x10/0x10 [ 657.355501][ C1] ? __lock_acquire+0x683/0x2cf0 [ 657.360560][ C1] preempt_schedule_irq+0x4b/0x90 [ 657.365669][ C1] irqentry_exit+0x14f/0x910 [ 657.370304][ C1] ? trace_irq_disable+0x3b/0x140 [ 657.375384][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.381413][ C1] RIP: 0010:unwind_next_frame+0xf8/0x2550 [ 657.387175][ C1] Code: 79 ca 0e 00 75 1f c6 05 ec 79 ca 0e 01 48 c7 c7 c0 b3 e9 8b be 4a 03 00 00 48 c7 c2 00 b4 e9 8b e8 9d 77 2b 00 48 89 6c 24 38 <48> 89 5c 24 40 49 8d 5e 50 48 89 d8 48 c1 e8 03 48 89 44 24 28 42 [ 657.406856][ C1] RSP: 0018:ffffc9000dd2f428 EFLAGS: 00000202 [ 657.412970][ C1] RAX: 0000000000000001 RBX: ffffffff816e0123 RCX: 8000000000000001 [ 657.420979][ C1] RDX: 00000000603432e3 RSI: ffffffff8c4cd760 RDI: ffffffff8c4cd720 [ 657.428996][ C1] RBP: 1ffff92001ba5eac R08: ffffffff8177710f R09: 0000000000000000 [ 657.437011][ C1] R10: 0000000000000000 R11: ffffffff8eb5a1e0 R12: dffffc0000000000 [ 657.445023][ C1] R13: ffffffff8177710f R14: ffffc9000dd2f528 R15: 1ffff92001ba5ea5 [ 657.453042][ C1] ? unwind_next_frame+0x8f/0x2550 [ 657.458212][ C1] ? arch_stack_walk+0xe3/0x150 [ 657.463112][ C1] ? unwind_next_frame+0x8f/0x2550 [ 657.468277][ C1] ? unwind_next_frame+0xbe/0x2550 [ 657.473447][ C1] ? __unwind_start+0xed/0x660 [ 657.478253][ C1] ? unwind_next_frame+0x8f/0x2550 [ 657.483412][ C1] __unwind_start+0x514/0x660 [ 657.488146][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 657.494351][ C1] arch_stack_walk+0xe3/0x150 [ 657.499078][ C1] ? arch_stack_walk+0xe3/0x150 [ 657.503980][ C1] stack_trace_save+0xa9/0x100 [ 657.508811][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 657.514257][ C1] ? __lock_acquire+0x683/0x2cf0 [ 657.519254][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 657.524855][ C1] kasan_save_track+0x3e/0x80 [ 657.529652][ C1] __kasan_slab_alloc+0x6c/0x80 [ 657.534554][ C1] kmem_cache_alloc_noprof+0x2a4/0x5f0 [ 657.540065][ C1] ? kmem_cache_alloc_noprof+0x152/0x5f0 [ 657.545742][ C1] ? fill_pool+0x163/0x600 [ 657.550297][ C1] ? fill_pool+0x163/0x600 [ 657.554764][ C1] fill_pool+0x163/0x600 [ 657.559050][ C1] ? __pfx_fill_pool+0x10/0x10 [ 657.563875][ C1] ? rcu_is_watching+0x16/0xb0 [ 657.568685][ C1] ? debug_object_activate+0x364/0x420 [ 657.574207][ C1] debug_object_activate+0x38d/0x420 [ 657.579540][ C1] ? __pfx_rcu_free_slab+0x10/0x10 [ 657.584696][ C1] call_rcu+0x43/0x8b0 [ 657.588811][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.594697][ C1] __slab_free+0x274/0x2c0 [ 657.599169][ C1] ? qlist_free_all+0x8e/0x100 [ 657.603982][ C1] qlist_free_all+0x99/0x100 [ 657.608626][ C1] ? __kmalloc_noprof+0x1af/0x720 [ 657.613691][ C1] kasan_quarantine_reduce+0x148/0x160 [ 657.619295][ C1] __kasan_slab_alloc+0x22/0x80 [ 657.624212][ C1] __kmalloc_noprof+0x315/0x720 [ 657.629088][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 657.634211][ C1] ? __kmalloc_noprof+0x1af/0x720 [ 657.639266][ C1] ? sk_prot_alloc+0xe7/0x210 [ 657.643955][ C1] ? sk_prot_alloc+0xe7/0x210 [ 657.648647][ C1] sk_prot_alloc+0xe7/0x210 [ 657.653161][ C1] ? sk_alloc+0x27/0x390 [ 657.657416][ C1] sk_alloc+0x3a/0x390 [ 657.661493][ C1] __netlink_create+0x62/0x260 [ 657.666271][ C1] ? __pfx_genl_release+0x10/0x10 [ 657.671320][ C1] netlink_create+0x3ca/0x590 [ 657.676001][ C1] ? __pfx_genl_unbind+0x10/0x10 [ 657.680948][ C1] ? __pfx_genl_bind+0x10/0x10 [ 657.685736][ C1] __sock_create+0x4b3/0x9d0 [ 657.690340][ C1] __sys_socket+0xd6/0x1b0 [ 657.694766][ C1] __x64_sys_socket+0x7a/0x90 [ 657.699450][ C1] do_syscall_64+0x166/0x520 [ 657.704051][ C1] ? trace_irq_disable+0x3b/0x140 [ 657.709088][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.715160][ C1] ? clear_bhb_loop+0x70/0xc0 [ 657.719844][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.725769][ C1] RIP: 0033:0x7f998a59f947 [ 657.730194][ C1] RSP: 002b:00007f998b4ccf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 657.738621][ C1] RAX: ffffffffffffffda RBX: 00007f998a826270 RCX: 00007f998a59f947 [ 657.746596][ C1] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 657.754593][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 657.762637][ C1] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000000 [ 657.770636][ C1] R13: 00007f998a826308 R14: 00007f998a826270 R15: 00007ffcffddc2a8 [ 657.778640][ C1] [ 657.781661][ C1] task:syz.3.3682 state:R running task stack:24488 pid:19275 tgid:19275 ppid:16800 task_flags:0x400040 flags:0x00080000 [ 657.795285][ C1] Call Trace: [ 657.798583][ C1] [ 657.801549][ C1] __schedule+0x17d4/0x5630 [ 657.806093][ C1] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 657.811495][ C1] ? pfn_valid+0xba/0x490 [ 657.815841][ C1] ? page_table_check_set+0x127/0x530 [ 657.821230][ C1] ? __pfx___schedule+0x10/0x10 [ 657.826097][ C1] ? page_table_check_set+0x127/0x530 [ 657.831483][ C1] ? page_table_check_set+0x4c8/0x530 [ 657.836869][ C1] ? page_table_check_set+0x127/0x530 [ 657.842269][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 657.847672][ C1] preempt_schedule_common+0x7f/0xd0 [ 657.852972][ C1] preempt_schedule_thunk+0x16/0x40 [ 657.858204][ C1] _raw_spin_unlock+0x41/0x50 [ 657.862890][ C1] insert_page+0x2db/0x440 [ 657.867350][ C1] ? __pfx_insert_page+0x10/0x10 [ 657.872333][ C1] ? vm_insert_page+0x20c/0x380 [ 657.877192][ C1] ? vmalloc_to_page+0x41c/0x6b0 [ 657.882133][ C1] kcov_mmap+0xc9/0x140 [ 657.886327][ C1] mmap_region+0x19e6/0x2310 [ 657.890947][ C1] ? __pfx_mmap_region+0x10/0x10 [ 657.895900][ C1] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 657.902083][ C1] ? __pfx_mmap_region+0x10/0x10 [ 657.907051][ C1] ? mas_ascend+0x2f9/0x8b0 [ 657.911718][ C1] ? cap_mmap_addr+0xaf/0x100 [ 657.916448][ C1] ? bpf_lsm_mmap_addr+0x9/0x50 [ 657.921341][ C1] ? security_mmap_addr+0x71/0x240 [ 657.926462][ C1] ? shmem_mapping+0xd/0x50 [ 657.930991][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 657.936467][ C1] do_mmap+0xc3b/0x10c0 [ 657.940673][ C1] ? __pfx_do_mmap+0x10/0x10 [ 657.945271][ C1] ? down_write_killable+0x17e/0x240 [ 657.950577][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 657.956226][ C1] ? apparmor_mmap_file+0x2da/0x3e0 [ 657.961441][ C1] vm_mmap_pgoff+0x272/0x4e0 [ 657.966055][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 657.971185][ C1] ? __fget_files+0x2a/0x420 [ 657.975887][ C1] ? __fget_files+0x3a2/0x420 [ 657.980577][ C1] ? __fget_files+0x2a/0x420 [ 657.985184][ C1] ksys_mmap_pgoff+0x4dc/0x760 [ 657.989960][ C1] do_syscall_64+0x166/0x520 [ 657.994557][ C1] ? trace_irq_disable+0x3b/0x140 [ 657.999608][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.005682][ C1] ? clear_bhb_loop+0x70/0xc0 [ 658.010370][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.016277][ C1] RIP: 0033:0x7f998a59de42 [ 658.020702][ C1] RSP: 002b:00007ffcffddc358 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 658.029134][ C1] RAX: ffffffffffffffda RBX: 00007f9987ff4000 RCX: 00007f998a59de42 [ 658.037126][ C1] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f9987ff4000 [ 658.045124][ C1] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 658.053118][ C1] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 658.061103][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 00007f998a825fa0 [ 658.069115][ C1] [ 658.072188][ C1] rcu: rcu_preempt kthread starved for 1691 jiffies! g97393 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 658.081510][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 658.083325][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 658.100188][ C1] rcu: RCU grace-period kthread stack dump: [ 658.106137][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 658.119692][ C1] Call Trace: [ 658.123005][ C1] [ 658.125970][ C1] __schedule+0x17d4/0x5630 [ 658.130530][ C1] ? __lock_acquire+0x683/0x2cf0 [ 658.135553][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 658.140728][ C1] ? __pfx___schedule+0x10/0x10 [ 658.145643][ C1] ? schedule+0x90/0x2b0 [ 658.149947][ C1] schedule+0x164/0x2b0 [ 658.154154][ C1] schedule_timeout+0x152/0x2c0 [ 658.159044][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 658.164463][ C1] ? __pfx_process_timeout+0x10/0x10 [ 658.169802][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.175653][ C1] ? prepare_to_swait_event+0x322/0x350 [ 658.181381][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 658.186676][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 658.192896][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 658.198237][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 658.203506][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 658.208148][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 658.213485][ C1] ? __kthread_parkme+0x71/0x1f0 [ 658.218507][ C1] ? __kthread_parkme+0x199/0x1f0 [ 658.223593][ C1] kthread+0x38b/0x480 [ 658.227723][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 658.233065][ C1] ? __pfx_kthread+0x10/0x10 [ 658.237720][ C1] ret_from_fork+0x514/0xb70 [ 658.242367][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 658.247558][ C1] ? __switch_to+0xc89/0x1420 [ 658.252309][ C1] ? __pfx_kthread+0x10/0x10 [ 658.256950][ C1] ret_from_fork_asm+0x1a/0x30 [ 658.261782][ C1] [ 658.264862][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 658.271223][ C1] CPU: 1 UID: 0 PID: 18024 Comm: kworker/R-wg-cr Not tainted syzkaller #0 PREEMPT(full) [ 658.281085][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 658.291179][ C1] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 658.298014][ C1] RIP: 0010:rcu_is_watching+0x72/0xb0 [ 658.303433][ C1] Code: 98 28 71 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 35 8b 03 65 48 ff 0d 77 25 c4 11 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f c3 cc cc cc cc cc e8 ef 8a 87 ff eb e8 48 c7 c7 40 07 [ 658.323252][ C1] RSP: 0018:ffffc90000a080c8 EFLAGS: 00000202 [ 658.329389][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000102 [ 658.337398][ C1] RDX: 8000000000000100 RSI: ffffffff8c4cd760 RDI: ffffffff8c4cd720 [ 658.345410][ C1] RBP: ffffc90000a082a8 R08: 0000000000000100 R09: 0000000000000000 [ 658.353429][ C1] R10: 0000000000000000 R11: ffffffff8eb5a1e0 R12: 0000000000000000 [ 658.361444][ C1] R13: 0000000000000001 R14: ffffffff8e5277d8 R15: dffffc0000000000 [ 658.369461][ C1] FS: 0000000000000000(0000) GS:ffff888125021000(0000) knlGS:0000000000000000 [ 658.378427][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.385043][ C1] CR2: 0000555568b8a4e8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 658.393055][ C1] Call Trace: [ 658.396363][ C1] [ 658.399241][ C1] ? ip_route_me_harder+0x52e/0xfe0 [ 658.404566][ C1] ip_route_me_harder+0x5ed/0xfe0 [ 658.409647][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 658.415250][ C1] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 658.421370][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 658.427298][ C1] ? local_lock_release+0x9c/0x160 [ 658.432506][ C1] synproxy_send_tcp+0x332/0x670 [ 658.437598][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 658.443474][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 658.449847][ C1] ? nft_socket_eval+0x688/0xa10 [ 658.454916][ C1] ? synproxy_pernet+0x45/0x270 [ 658.459820][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 658.465075][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 658.470848][ C1] ? nf_ip_checksum+0x13c/0x510 [ 658.475832][ C1] nft_synproxy_do_eval+0x335/0x550 [ 658.481099][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 658.486870][ C1] ? __lock_acquire+0x683/0x2cf0 [ 658.491868][ C1] nft_do_chain+0x48d/0x1b10 [ 658.496535][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 658.501624][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 658.506470][ C1] nft_do_chain_inet+0x360/0x4b0 [ 658.511562][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 658.517070][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 658.521885][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 658.527305][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 658.532818][ C1] nf_hook_slow+0xc5/0x220 [ 658.537291][ C1] NF_HOOK+0x21f/0x3c0 [ 658.541492][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 658.547529][ C1] ? NF_HOOK+0x9e/0x3c0 [ 658.551737][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 658.556382][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 658.562423][ C1] ? ip_local_deliver+0x113/0x190 [ 658.567503][ C1] NF_HOOK+0x336/0x3c0 [ 658.571629][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 658.576817][ C1] ? NF_HOOK+0x9e/0x3c0 [ 658.581021][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 658.585665][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 658.590846][ C1] ? ip_rcv_core+0x88d/0xd50 [ 658.595491][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 658.600043][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 658.604599][ C1] process_backlog+0xa6b/0x18b0 [ 658.609593][ C1] ? process_backlog+0x3de/0x18b0 [ 658.614686][ C1] __napi_poll+0xaa/0x330 [ 658.619070][ C1] net_rx_action+0x61d/0xf50 [ 658.623719][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 658.628901][ C1] handle_softirqs+0x226/0x860 [ 658.633742][ C1] ? do_softirq+0x77/0xd0 [ 658.638121][ C1] ? wg_packet_decrypt_worker+0x2ae/0xda0 [ 658.643894][ C1] do_softirq+0x77/0xd0 [ 658.648090][ C1] [ 658.651052][ C1] [ 658.654014][ C1] __local_bh_enable_ip+0x100/0x140 [ 658.659259][ C1] wg_packet_decrypt_worker+0x2ae/0xda0 [ 658.664913][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 658.671115][ C1] ? process_scheduled_works+0xa1a/0x14c0 [ 658.676914][ C1] ? process_scheduled_works+0xa1a/0x14c0 [ 658.682693][ C1] ? rcu_is_watching+0x16/0xb0 [ 658.687501][ C1] ? process_scheduled_works+0xa1a/0x14c0 [ 658.693269][ C1] process_scheduled_works+0xa88/0x14c0 [ 658.698920][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 658.704945][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 658.710022][ C1] ? assign_work+0x3af/0x5d0 [ 658.714670][ C1] rescuer_thread+0x7b6/0x10b0 [ 658.719531][ C1] ? rescuer_thread+0xb8/0x10b0 [ 658.724477][ C1] kthread+0x38b/0x480 [ 658.728595][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 658.733858][ C1] ? __pfx_kthread+0x10/0x10 [ 658.738490][ C1] ret_from_fork+0x514/0xb70 [ 658.743130][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 658.748307][ C1] ? __switch_to+0xc89/0x1420 [ 658.753037][ C1] ? __pfx_kthread+0x10/0x10 [ 658.757686][ C1] ret_from_fork_asm+0x1a/0x30 [ 658.762523][ C1] [ 659.159214][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 660.194753][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 661.240973][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 662.275225][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 663.308872][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 664.360837][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 665.384089][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.437448][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available