last executing test programs: 1m1.937634067s ago: executing program 2 (id=1261): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) epoll_create1(0x0) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x2000c080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 49.422119349s ago: executing program 2 (id=1261): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) epoll_create1(0x0) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x2000c080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 39.615334641s ago: executing program 2 (id=1261): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) epoll_create1(0x0) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x2000c080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 27.793079947s ago: executing program 2 (id=1261): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) epoll_create1(0x0) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x2000c080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 17.186677048s ago: executing program 2 (id=1261): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) epoll_create1(0x0) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x2000c080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 6.032198421s ago: executing program 1 (id=2028): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) close(r2) listen(r0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x9a6}}, 0x0, 0x3}, &(0x7f00000001c0)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.472400324s ago: executing program 2 (id=1261): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) epoll_create1(0x0) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x2000c080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 4.097997961s ago: executing program 0 (id=2032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="e524d48e244300583488142391f72514c935573277077420cac1d29dc079b693f28e2a1249925bafeb944dd6b9227dc0eff4d4e3c975b362b12a36a416f1a77fced568e320c81dffbeeec438e996d8ab95026394000cb5afdfe4e765006c40b9bf4d2bc32495c3eed1026d1ad9cf3faadec2c088e7c90bab66e6691ef8e310aa0d5258358a6d6025042a0f7294a1f859eb75b762b0c7d1b0d6e74f26", 0x9c, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x6f3, @loopback, 0x7ffffffe}, 0x7e) sendto$inet6(r1, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040000) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcb) sendmmsg(r3, &(0x7f0000005c00), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1, 0x0, @void, @value}, 0x20) sendmmsg(r3, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005c00), 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xffffffffffffff8a, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='rdma.current\x00', 0x275a, 0x0) recvmsg$unix(r9, 0x0, 0x12000) 4.095501616s ago: executing program 1 (id=2033): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create(0x3) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) 3.701243674s ago: executing program 1 (id=2037): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x80000001, 0xd, 0x8, 0x2}, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @mcast2, 0x2}}, 0xf, 0x9, 0x867a, 0x52, 0x0, 0x0, 0x3}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x6c, 0x4, 0x201, 0x9, 0x4, 0x40, 0x1, 0x2, r2}, &(0x7f0000000200)=0x20) 3.570002815s ago: executing program 1 (id=2039): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x2000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = socket(0xb, 0x80801, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010300000000000000001f000000080013001fdce153ae718465d4231e599f033dad681073b2f2563d97c490073b97ce052daff906bd5cfbd3d9a59b77f92e39b2d1481d8f614899b0cbbcf8f5a6b3487190dfc253f792eb5ceb4296ad3dda860a2d7f04d62addd025aca982cb38f803bdb81440cae3ab8fc2659ac71c0b2b729f77e328ad873203ab5781c2f315138b655567b61480ff1c396643824a00", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x3000000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x0, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0x0, 'veth0_to_hsr\x00', 'wg0\x00', {0xff}, {0xff}, 0x62}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@remote, @private=0xa010101, 0xff000000, 0xff000000, 'ip6gre0\x00', '\x00', {0xff}, {}, 0x5e, 0x2, 0x49}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1, 0x6}, {0x1, 0x3, 0x2}, {0xffffffffffffffff}, 0x8, 0x10}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x4}, {0x0, 0x0, 0x5}, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_emit_ethernet(0x4e, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x0) sendto$inet6(r0, &(0x7f0000000140)="f4", 0x1, 0x400c840, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r10 = socket$netlink(0x10, 0x3, 0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001a40)="9a6accb20d7b", 0x6}], 0x1}}], 0x1, 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0xb}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r12, r11}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={r12}) shutdown(r12, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1471e083bc29880000000f060103000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r9, 0x800442d3, &(0x7f0000000200)={0x9, 0x9, 0x3, @broadcast, 'veth0_to_team\x00'}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000780)={0x0, 0x3, 0xfffc}, 0x8) 2.892304358s ago: executing program 0 (id=2040): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000120005ff2cbd7000000000200000004a", @ANYRES32=0x0, @ANYBLOB="00696facda40040040001280090001"], 0x68}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{0x0}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x32, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0x72, 0x61, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7, 0x8000, 0x8, 0x1000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x72, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000, @void, @value}, 0x94) 2.88377882s ago: executing program 1 (id=2041): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x9003, 0x0, 0x90, [0x20000200, 0x20000230], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="800000000000000000000000000000000000000000000000040000000000010d0000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 2.832969028s ago: executing program 4 (id=2042): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x82000000000000, 0x1, 0x101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x0, 0x0, 0x8000, 0x10080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3], 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4008001) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r10, @ANYBLOB="200001"], 0x38}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) 2.670720276s ago: executing program 1 (id=2043): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x4, 0x8, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x50, 0x7800, 0xd, 0x49f7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x2f, 0x9, 0x8, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x20, 0x700, 0xf2, 0x2}}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'ipvlan0\x00', @broadcast}) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000014001a80100004800c00048008cbfa"], 0x34}}, 0x0) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000101050000000000000000000300000108001a40ffffeaf708000840800000085c0001800c000280050001008800000006000340000100000c000280050001000600000006000340000000001400018008000100ffffffff080002007f00000106000340000100000c00028005000100000000000600034000040000"], 0x80}, 0x1, 0x0, 0x0, 0x8814}, 0x800) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000214010a000000040000000008004400", @ANYRES32=r2, @ANYBLOB="08bd44002750fffa96ff96862523e8935d49958f067d689021155d09251999", @ANYRES32, @ANYBLOB], 0x20}}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="182000040000000000f98c0292754a43544c6e3cb63900000fe5d21bc95c3c29a8ac93d9bcaa45fd625bc0834771bbf292a2a65cffffffff7de4884b4b7d380d2b61b284fa0eded19132f9f5a75e308c02a03dd8c7609881a21b23009612966d6f5a0711747ff71108976f673e956f84fc0d92f26417b72963bedf2ba856418e566fc527799a09d67608ac5a2de3090d7f8f1eedfcc247b5b2a5be488573531ed34619d7"], 0x18}}, 0x0) 2.575701463s ago: executing program 3 (id=2044): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x21, 0xa, 0x1) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) read(r3, &(0x7f00000008c0)=""/4096, 0x1000) sendmmsg$inet6(r0, &(0x7f000000b600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="25001e7240", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="e7", 0x1}, {&(0x7f00000000c0)="44b12b5a2229568c6988e57a3c5603a5b3bbfcd2eac9de91ef68ed8bc3aca752528257b93662be84093baa4cfa402611fc6e3f2c0ca217faadee2cddcadb7b465b8657a9dbe14adc64062c78a7cac3fe0c560c3849a1da65a6b74b73222cb7b7e21095d2e883b71f7bb159df02c785a2121819c572ce61ae21633f15618cfd7eecbf73f5fceffe6d2b1c3918056634203f", 0x91}, {&(0x7f0000000900)="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", 0x586}], 0x3}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0xff, @private1, 0x8}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000740)="5db8096cc9ba30b7128124035b1c7c9d6ea85d2ffbe9dca0a89e3840218ea8199d48039fdfc4aa330222571d64b76504c28a825ae8aa38193ea0d59686dad964748dda5bf81bb503fb746cf4c1e1e0033bd2c9a3147ea956770e75d48b4aec4aa7df0d733a8b", 0x66}, {&(0x7f0000000500)="d1f5d16789b00c5d6b7b8d521f784e09c3295465cc1b1de559a40461b08a175bb6efc20e34f54dfc945c8f5aa35b9e", 0x2f}, {&(0x7f00000007c0)="8be0c00ee92f3348484d47dcb706860edfabd7f0b46bf2af5d4b45e4baaa593ce103f8a76e4e11d3fd1b1a7c4f6c95a87e555d75b7202d94973d5524eae83d148d6e9e01e05f78f896787ece85210bdea762bfbc3c9301680a248a5d40c553a0e8f8cc20", 0x64}, {&(0x7f0000000ec0)="165cb8b0d83ea36d5576770cc11d243f664f19", 0x13}, {&(0x7f0000000fc0)="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", 0xff}, {&(0x7f00000010c0)="33e26f7f62eae6ca4f8064b021c605a333f14c882a8d68234724d9fa70c74e2b516b2d0a42510674906e532398eae363f94d30fabdf00a56ffa194fff13d37501d69940fe79b431c4fc1adbfd81c1d9bfe8ac547fccd1981b3dd196e2ee018ed1050e04f394b179aa04180203615845a1a2dfaf92e004dcb37aabf7d4647cf754d2f0b574ba7e747e20e4272fd2ec7d554f67d91ad3a189b15ceb1e3856e713f9acce249bf1973c9235d4ab19f3464c5cf8c7485d2bcae5684dcb059537ceeb821dd52fa399ce6ed0b6449bb5068cb65adf9dc321b4e8d9d9a190dff44a80e5ea88f78927b3549098ef6f8b6f4eb641041fbe6b5f62a57", 0xf7}, {&(0x7f00000011c0)="b22ca166bca3ce62d0ec15ea729c0a3f362dd29a0c49768940e53783187a618dd5889a09041931a1904d698a0661b9c0a2a78092d32cd3b32bea46d5536e7fb4f8b1635e3d834cf21a513abb0321b2b7526c3e95aa8cc79476562d0bdaaa6c693527be3a89d447ccc891bdea6fa61de790cabfe94e9f1d3af5e0eb70ac08ff49c13a7388559aa5d2c96b7ee060224163a8717f3f94547652b04ae25f8adf3a72304c0e742af67e2055db02d1befacaa75be95d3a3da09141ec9018561ad58498605d14a3322d0863b6b2481b98716bc908b988f33398e99fc48554a523fd15c95e7c0eb9c801015ea2da77edc047d0d547", 0xf1}], 0x7, &(0x7f0000001340)=[@rthdr={{0x88, 0x29, 0x39, {0x1d, 0xe, 0x3, 0x8, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, @ipv4={'\x00', '\xff\xff', @local}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x1, 0x1, 0x0, [@private2, @mcast1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x84, 0x4, 0x2, 0xfc, 0x0, [@local, @mcast2]}}}, @flowinfo={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x0, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x3b}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x1d8}}, {{0x0, 0x0, &(0x7f0000002980)=[{0x0}, {&(0x7f0000001640)="49d6253c18c2705968aed57317154588e6527d978938f103d83f2c1ec733a31f256edbc414b82833c49cc68e95acdfd3783fd96fb71c27783ca44bd0d4cd0c3d4d5af221d38a537c716b1606b075df4a0769", 0x52}], 0x2, &(0x7f0000002a00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x4, 0x2, 0x2, 0x59, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x0, 0x6, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x16}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x89, 0x9, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0xaa, 0x800, [0x4]}}, @generic={0xf, 0x32, "b001c0aea757db2c9e469afe94a80c6cfacb5ba1eb12faa60da4d86914a04928db2681abd442f3d4f723787bcf8b7505a56d"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x51e}}], 0xe0}}], 0x4, 0x400c404) 2.18012631s ago: executing program 3 (id=2045): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'dummy0\x00', 0x0}) syz_emit_ethernet(0xc2, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@noop, @ssrr={0x89, 0x3, 0x92}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x10) nanosleep(&(0x7f0000000200), 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x3c}}, 0x44004) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000000d00)={&(0x7f0000000a00)={0xa, 0x4e24, 0x58, @loopback, 0x42a}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="24000000000000002900000032000000fec0ffffffff000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000091401"], 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) 1.916235947s ago: executing program 0 (id=2046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x88c4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r10, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20222102}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000041}, 0x20048845) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 782.814342ms ago: executing program 0 (id=2047): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b06000000000000000030000100050036000000000008000200", @ANYRES32=r3, @ANYBLOB="050035000000000005003300030000000500340000000000"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r6, 0x1, 0x70bd26, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 713.267574ms ago: executing program 4 (id=2048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0) 711.300318ms ago: executing program 3 (id=2049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x500}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x500}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 579.184981ms ago: executing program 3 (id=2050): r0 = socket$inet6(0xa, 0x5, 0x6) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xfffffffd}, 0x1c) listen(r4, 0x2) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)="101dc6c339d5", &(0x7f00000007c0)="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", 0x75, r2}, 0x38) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001040000000000000104000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000090000000000000000010000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000600000018110000", @ANYBLOB="12d7df4ef7448b4439225d42e13e4aa25679033c11f44bbcdec26ecab482125f39bbde8b5787b8ddbcf792a7fe894a21fe7d407740f3368cae3526030f9ce960ca8a8136ebf6c6dc49efc0a056e71812bf0d4f1634fa3563bea5", @ANYBLOB="0000000000000000b702000000000000850000008600000018300000040000000000000000000000950000000000000018000000010000000000000010000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000edb112a71cb4645f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES16=r2, @ANYRES64=r5, @ANYRES32=r4], &(0x7f0000000280)='GPL\x00', 0xfffffff1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) (async, rerun: 32) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffe, 0x0, 0x1, 0x5, 0x7, 0x2}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213", @ANYRES32=r1, @ANYRES8, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket(0xf, 0x6, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r8, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c1000000000", 0x53}], 0x1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200)=0x10001, 0x12) (async) sendfile(r10, r9, 0x0, 0xf03a0005) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x4000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 522.819629ms ago: executing program 4 (id=2051): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c0007000000000000000000080009000000070006006c630000080008000000000008000b0073697000"], 0x54}}, 0x0) 413.708694ms ago: executing program 4 (id=2052): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200007300000080", @ANYRES32, @ANYBLOB="0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r3, &(0x7f0000000380), 0xe) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f00000006c0)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000a00000000009aded8d2327eafd300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r8, &(0x7f0000000740)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 329.229297ms ago: executing program 4 (id=2053): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x9003, 0x0, 0x90, [0x20000200, 0x20000230], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="800000000000000000000000000000000000000000000000040000000000f9ffff00000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 310.163703ms ago: executing program 4 (id=2054): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d9b4a47b12c86507"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfff8, 0x6}, &(0x7f0000000140)=0x90) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @multicast2, @loopback}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) close(r3) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xc0000, 0x7, 0xaa50, 0xd18, 0x5, 0x9, 0x1, {0x0, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x34c7}}, 0xd, 0x3ff, 0x10, 0xc, 0x7}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={r9, 0x6, 0x20, 0x1, 0x882}, &(0x7f0000000300)=0x18) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="0a010000000000000a004e2400000000fe880000000000000000000000000101060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a004e2200000006000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff00"/272], 0x110) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03076003008cb89e088025b7", 0x0, 0x402f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000180)=0xae9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x21, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000300000000000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001836000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=0x1, @ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x2, 0xb7, &(0x7f00000007c0)=""/183, 0x41100, 0x36, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000580)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xffffffff, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000600)=[{0x4, 0x1, 0x1, 0x6}, {0x3, 0x2, 0x4, 0xb}, {0x0, 0x4, 0x7, 0xb}, {0x3, 0x3, 0x2, 0x2}, {0x1, 0x1, 0x7}, {0x1, 0x2, 0xe, 0x3}, {0x5, 0x1, 0xd, 0x8}, {0x5, 0x5, 0x5, 0xc}, {0x3, 0x4, 0xf, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102000000000000000000000000ebf5622b060676179bf02a5ca21c9181166a3e561614e54b27d2d16a66c28a808c576265bf5f436e151a08"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 234.083839ms ago: executing program 0 (id=2055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001200010000000000000000000000000000000f00e3ffffff0000000000000000000033"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000050000003ff63e"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b8408217f05"], 0xffdd) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="08f51e3de415", 0x6}, {&(0x7f0000000040)="96bc1480bb58", 0x6}, {&(0x7f0000000140)="7f965b77aedc50c9086c05dfe0e54a7c0f9ff49590b42d07d6bfa2251bc7e32b9cc0838616333247f20e710822f2083a41950c3d22a8dd068e3cc5b2cd4ebee04b890dad23f50b6cb248938ccdd536af9bd5edad77c983ae3f1bc7742cbcef6bb9709929be3bb77fa3e7d1436ee53f4508c802af8da9003d40970b0f0a7fd0775fdfd35cfb9a1197cee616e67cf7386d1ab86652247f06e27ea43567cebcc05c785705bcb545913109e90011ee5217f9257b346d368895248d4c4ebb0e2a59", 0xbf}, {&(0x7f0000000280)="9f482b6844a708e538778d265009ec6b3dcb7fe3b04b1cfa2dd2ed06ac3ab73083003aa5ef361fd14046b8f035e1505698031f15054ea275e555086468a89a8c7ffb8fd56eb6c150a5be5fb9a718afa44e2d1240b10f8ebe96bb9ee73fea932dc4c951c863b7a3d9245221887fef", 0x6e}, {&(0x7f0000000300)="b39574a12218dbc4daf37dfaf004bef1df266d967987ed18c3625a446a0ec14a4e980f633091c2c52282f7dffb3bf249473e50f0821cba29c9302ee385d6e2289d2d0b7d9d5cde40228469e7ccd1d8082eb64551", 0x54}, {&(0x7f0000000440)="254f97caa389290ca2abb65a3e5e163588d429c77f9523255dc22a0bb9fe4e23f49ff475db9879db96d77c4c3d0a4c16841d1944c5a41527ce50b582447dcc9ccd8bf1e2f90581539931e6bacafa4b78cd763bec44f271852b2f2db02e96c4af8a6f075cb4cf04ddeb4f7c38259da2c7078662810e7fbc", 0x77}], 0x6, &(0x7f0000000540)=ANY=[], 0x58}, 0x0) 169.238128ms ago: executing program 3 (id=2056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 24.15285ms ago: executing program 3 (id=2057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x30000000, 0x0, 0x0, 0x7, 0x4, 0xf8000000, 0x7ffe}, 0x1c) close(r1) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2404c005, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @local}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff"], 0x50}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r4, &(0x7f0000003a00)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0xffffff7f, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000600)="1b", 0x1}], 0x1}}], 0x1, 0x0) write$tun(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000ffffffffffffbbbbbbbbbb9b080a4500001c00640000042f9078ac2977d64faff7b0062700bbccfdde7a5dbceb2f2801e0000001000086dd00089078a113e30a2feff48a07d4d7ed5a0b3c6071705fce4a08d58dbc311d13c0c0e305d92f38c6ae07f4b423bfb1494877d455a199e48057c1d4edc396a428af868a8a68df16d7ce80d3eac5cac3631f02642c61dbd0a59db85c"], 0x2e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '/dev/net/tun\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r8, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa00}, 0x10}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000400)=r9, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffddff86dd60b8192300102000fe8000000000000000000000000000aafe8000000000000000000000000000aa00010000000000003100050005020000"], 0x0) 0s ago: executing program 0 (id=2058): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000300), 0xd) sendmsg$inet(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001e00)='y', 0x1}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xff, 0x0, 0x7, 0x8d14, 0x8, 0x7fffffff, 0x1, 0x47bf}, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xf, 0x2, 0x9, 0x7fffffffffffffff, 0x8, 0xfffffffffffff001}, &(0x7f00000001c0)={0x3, 0x4, 0x1, 0x1dec, 0x9, 0x2, 0x286, 0xffff}, &(0x7f0000000280)={r4, r5+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x3, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000100)=0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') read(r9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05eb01d4180000000000005e340000000000000002000004"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xc, 0x0, 0x0, @void, @value}, 0x28) r10 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11}, @func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{0x2}]}, @var]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$key(r10, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa00000000000000000800120000000000030000000000000026000000000000000000000000000000e0000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r11, 0x29, 0x2a, &(0x7f0000000240)="175e26167405710d9190d80b2bd52a3c733b5a0221e59a514c997b6aa833b4526636c8a687669f68266ca7ce51a435ddba0c08d961b3dde56e06dceb0e2e550caa336cc0e57e140c63453bb70b155ebe4ce9b4e2bac62cd965f3ccb5e438410aae6dca70e98ea9269073de266a0b5f1f25242208b9128569ace0b3d3db33958df7c1220972f4d522", 0x88) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, r13}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x6, '\x00', r13, 0xffffffffffffffff, 0x5, 0x1, 0xffb, 0x0, @void, @value, @void, @value}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r14, 0x0, 0xa002a0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000040100000f1f7000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x1009, &(0x7f0000002a80)=""/4105, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a260909140002"], 0x44}, 0x1, 0x1000000}, 0x0) kernel console output (not intermixed with test programs): ][T10366] tun0: linktype set to 1 [ 199.607065][T10287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.659389][T10287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.735522][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 199.742976][T10287] team0: Port device team_slave_0 added [ 199.913956][T10287] team0: Port device team_slave_1 added [ 199.963641][T10392] FAULT_INJECTION: forcing a failure. [ 199.963641][T10392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.977998][T10392] CPU: 1 UID: 0 PID: 10392 Comm: syz.0.1293 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 199.988821][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.998922][T10392] Call Trace: [ 200.002237][T10392] [ 200.005195][T10392] dump_stack_lvl+0x241/0x360 [ 200.009962][T10392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.015210][T10392] ? __pfx__printk+0x10/0x10 [ 200.019840][T10392] ? __pfx_lock_release+0x10/0x10 [ 200.024913][T10392] should_fail_ex+0x3b0/0x4e0 [ 200.029643][T10392] _copy_from_user+0x2f/0xc0 [ 200.034298][T10392] copy_msghdr_from_user+0xae/0x680 [ 200.039536][T10392] ? __lock_acquire+0x1397/0x2100 [ 200.044600][T10392] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 200.050443][T10392] ? __fget_files+0x2a/0x410 [ 200.055077][T10392] ? __fget_files+0x2a/0x410 [ 200.059718][T10392] do_recvmmsg+0x3bd/0xab0 [ 200.064190][T10392] ? __pfx_do_recvmmsg+0x10/0x10 [ 200.069188][T10392] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 200.075127][T10392] ? ksys_write+0x22a/0x2b0 [ 200.079663][T10392] ? __pfx_lock_release+0x10/0x10 [ 200.084732][T10392] ? vfs_write+0x730/0xd30 [ 200.089198][T10392] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 200.095215][T10392] ? __fget_files+0x2a/0x410 [ 200.099861][T10392] __x64_sys_recvmmsg+0x199/0x250 [ 200.104924][T10392] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 200.110506][T10392] ? do_syscall_64+0x100/0x230 [ 200.115309][T10392] ? do_syscall_64+0xb6/0x230 [ 200.120028][T10392] do_syscall_64+0xf3/0x230 [ 200.124571][T10392] ? clear_bhb_loop+0x35/0x90 [ 200.129287][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.135215][T10392] RIP: 0033:0x7f48f2185d29 [ 200.139659][T10392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.159297][T10392] RSP: 002b:00007f48f308f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 200.167758][T10392] RAX: ffffffffffffffda RBX: 00007f48f2375fa0 RCX: 00007f48f2185d29 [ 200.175762][T10392] RDX: 000000000400029f RSI: 0000000020000440 RDI: 0000000000000003 [ 200.183764][T10392] RBP: 00007f48f308f090 R08: 0000000000000000 R09: 0000000000000000 [ 200.191765][T10392] R10: 0000000040010000 R11: 0000000000000246 R12: 0000000000000001 [ 200.199765][T10392] R13: 0000000000000000 R14: 00007f48f2375fa0 R15: 00007ffce9442758 [ 200.207785][T10392] [ 200.242298][T10287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.249302][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.324485][T10287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.355682][T10287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.373952][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.427237][T10287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.454094][T10383] vxcan1 speed is unknown, defaulting to 1000 [ 200.508055][T10287] hsr_slave_0: entered promiscuous mode [ 200.529922][T10287] hsr_slave_1: entered promiscuous mode [ 200.727469][T10287] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.792866][T10383] lo speed is unknown, defaulting to 1000 [ 200.863860][T10287] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.993910][T10287] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.133765][T10287] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.436525][T10417] sctp: [Deprecated]: syz.1.1300 (pid 10417) Use of int in maxseg socket option. [ 201.436525][T10417] Use struct sctp_assoc_value instead [ 201.452071][ T5842] Bluetooth: hci3: command tx timeout [ 201.486245][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 201.616829][T10287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.645597][T10287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.668059][T10420] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 201.700702][T10420] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 201.719802][T10421] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 201.739322][T10287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.755397][T10429] netlink: 'syz.4.1303': attribute type 9 has an invalid length. [ 201.771241][T10429] netlink: 'syz.4.1303': attribute type 6 has an invalid length. [ 201.773479][T10420] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 201.781266][T10428] netlink: 'syz.4.1303': attribute type 9 has an invalid length. [ 201.801338][T10287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.827871][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 201.912126][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 201.918237][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 202.109831][T10437] FAULT_INJECTION: forcing a failure. [ 202.109831][T10437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.123575][T10287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.147886][T10437] CPU: 1 UID: 0 PID: 10437 Comm: syz.0.1305 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 202.158730][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.168840][T10437] Call Trace: [ 202.172159][T10437] [ 202.175100][T10437] dump_stack_lvl+0x241/0x360 [ 202.179803][T10437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.185023][T10437] ? __pfx__printk+0x10/0x10 [ 202.189646][T10437] ? __pfx_lock_release+0x10/0x10 [ 202.194689][T10437] should_fail_ex+0x3b0/0x4e0 [ 202.199385][T10437] _copy_from_user+0x2f/0xc0 [ 202.204015][T10437] copy_msghdr_from_user+0xae/0x680 [ 202.209240][T10437] ? __pfx___might_resched+0x10/0x10 [ 202.214542][T10437] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 202.220383][T10437] ? do_recvmmsg+0x44e/0xab0 [ 202.224982][T10437] ? __might_fault+0xaa/0x120 [ 202.229671][T10437] do_recvmmsg+0x3bd/0xab0 [ 202.234134][T10437] ? __pfx_do_recvmmsg+0x10/0x10 [ 202.239102][T10437] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 202.245012][T10437] ? ksys_write+0x22a/0x2b0 [ 202.249537][T10437] ? __pfx_lock_release+0x10/0x10 [ 202.254599][T10437] ? vfs_write+0x730/0xd30 [ 202.259045][T10437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.265034][T10437] ? __fget_files+0x2a/0x410 [ 202.269650][T10437] __x64_sys_recvmmsg+0x199/0x250 [ 202.274691][T10437] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 202.280262][T10437] ? do_syscall_64+0x100/0x230 [ 202.285054][T10437] ? do_syscall_64+0xb6/0x230 [ 202.289744][T10437] do_syscall_64+0xf3/0x230 [ 202.294266][T10437] ? clear_bhb_loop+0x35/0x90 [ 202.298966][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.304881][T10437] RIP: 0033:0x7f48f2185d29 [ 202.309303][T10437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.328925][T10437] RSP: 002b:00007f48f308f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 202.337357][T10437] RAX: ffffffffffffffda RBX: 00007f48f2375fa0 RCX: 00007f48f2185d29 [ 202.345336][T10437] RDX: 000000000400029f RSI: 0000000020000440 RDI: 0000000000000003 [ 202.353312][T10437] RBP: 00007f48f308f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.361284][T10437] R10: 0000000040010000 R11: 0000000000000246 R12: 0000000000000001 [ 202.369274][T10437] R13: 0000000000000000 R14: 00007f48f2375fa0 R15: 00007ffce9442758 [ 202.377287][T10437] [ 202.381276][T10287] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.418813][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.425972][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.493325][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.500535][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.549473][T10443] vxcan1 speed is unknown, defaulting to 1000 [ 202.703008][T10441] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1306'. [ 202.725986][T10449] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1306'. [ 202.869179][T10460] sctp: [Deprecated]: syz.1.1312 (pid 10460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.869179][T10460] Use struct sctp_sack_info instead [ 202.880285][T10464] validate_nla: 31 callbacks suppressed [ 202.880309][T10464] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 202.899968][T10287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.965403][T10464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.000580][T10464] bond0: entered promiscuous mode [ 203.008140][T10464] bond_slave_0: entered promiscuous mode [ 203.021546][T10464] bond_slave_1: entered promiscuous mode [ 203.027719][T10464] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 203.057588][T10464] bond1: entered promiscuous mode [ 203.077909][T10464] team0: Port device bond0 added [ 203.220182][T10287] veth0_vlan: entered promiscuous mode [ 203.301606][T10287] veth1_vlan: entered promiscuous mode [ 203.384436][T10287] veth0_macvtap: entered promiscuous mode [ 203.409999][T10287] veth1_macvtap: entered promiscuous mode [ 203.467086][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.498502][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.514285][ T5840] Bluetooth: hci3: command tx timeout [ 203.521052][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.541031][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.569438][T10287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.613973][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.636005][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.678594][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.711141][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.734611][T10287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.782203][T10287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.817053][T10287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.846557][T10287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.871069][T10287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.117769][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.170987][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.183070][T10510] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 204.275194][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.291390][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.356967][T10513] __nla_validate_parse: 1 callbacks suppressed [ 204.356989][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 204.394443][T10513] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 204.785599][T10530] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1331'. [ 204.836234][T10537] netlink: 'syz.3.1333': attribute type 9 has an invalid length. [ 204.851355][T10532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1330'. [ 204.873351][T10538] netlink: 'syz.0.1330': attribute type 10 has an invalid length. [ 205.013858][T10538] tipc: Resetting bearer [ 205.089403][T10538] bridge0: port 3(team0) entered disabled state [ 205.121172][T10538] team0: left allmulticast mode [ 205.126352][T10538] team_slave_0: left allmulticast mode [ 205.153055][T10538] team_slave_1: left allmulticast mode [ 205.158591][T10538] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 205.174586][T10538] bond0: left allmulticast mode [ 205.181028][T10538] bond_slave_0: left allmulticast mode [ 205.187165][T10538] bond_slave_1: left allmulticast mode [ 205.193303][T10538] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 205.201063][T10538] bond1: left allmulticast mode [ 205.209336][T10538] team0: left promiscuous mode [ 205.214857][T10538] team_slave_0: left promiscuous mode [ 205.220772][T10538] team_slave_1: left promiscuous mode [ 205.227269][T10538] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 205.234844][T10538] bond0: left promiscuous mode [ 205.240212][T10538] bond_slave_0: left promiscuous mode [ 205.246068][T10538] bond_slave_1: left promiscuous mode [ 205.251902][T10538] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 205.263341][T10538] bond1: left promiscuous mode [ 205.273062][T10538] bridge0: port 3(team0) entered disabled state [ 205.284776][T10538] tipc: Resetting bearer [ 205.294684][T10538] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.320773][T10538] tipc: Resetting bearer [ 205.355142][T10538] tipc: Resetting bearer [ 205.668362][ T3564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.115838][T10560] vxcan1 speed is unknown, defaulting to 1000 [ 206.171897][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.181989][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.208593][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.217708][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.226330][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.233867][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.302170][ T3564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.405332][ T3564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.433580][T10560] lo speed is unknown, defaulting to 1000 [ 206.509583][ T3564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.533037][T10570] vxcan1 speed is unknown, defaulting to 1000 [ 206.632386][ T3564] bridge_slave_1: left allmulticast mode [ 206.638393][ T3564] bridge_slave_1: left promiscuous mode [ 206.645775][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.657332][ T3564] bridge_slave_0: left allmulticast mode [ 206.663458][ T3564] bridge_slave_0: left promiscuous mode [ 206.669281][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.183530][T10592] netlink: 'syz.4.1345': attribute type 9 has an invalid length. [ 207.315906][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.329304][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.350321][ T3564] bond0 (unregistering): Released all slaves [ 207.377644][T10570] lo speed is unknown, defaulting to 1000 [ 207.387166][T10606] netlink: 'syz.3.1348': attribute type 4 has an invalid length. [ 207.389639][T10605] netlink: 'syz.3.1348': attribute type 4 has an invalid length. [ 207.857595][T10626] pimreg3: entered allmulticast mode [ 207.893868][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1352'. [ 207.948589][T10623] pimreg3: left allmulticast mode [ 208.127906][T10570] chnl_net:caif_netlink_parms(): no params data found [ 208.317438][ T5840] Bluetooth: hci3: command tx timeout [ 208.361862][T10650] netlink: 'syz.4.1359': attribute type 9 has an invalid length. [ 208.519867][T10655] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 208.539851][T10655] dccp_invalid_packet: P.Data Offset(10) too large [ 208.754252][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1358'. [ 210.391172][ T5840] Bluetooth: hci3: command tx timeout [ 210.590684][ T3564] hsr_slave_0: left promiscuous mode [ 210.599921][ T3564] hsr_slave_1: left promiscuous mode [ 210.616555][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.632355][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.646414][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.654889][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.683136][ T3564] veth1_macvtap: left promiscuous mode [ 210.689110][ T3564] veth0_macvtap: left promiscuous mode [ 210.694838][ T3564] veth1_vlan: left promiscuous mode [ 210.700411][ T3564] veth0_vlan: left promiscuous mode [ 210.824884][T10673] netlink: 'syz.0.1364': attribute type 10 has an invalid length. [ 211.179027][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 211.222289][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 211.628401][T10645] vxcan1 speed is unknown, defaulting to 1000 [ 211.629183][T10570] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.653624][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.661733][T10570] bridge_slave_0: entered allmulticast mode [ 211.668808][T10570] bridge_slave_0: entered promiscuous mode [ 211.678855][T10667] bridge_slave_0: default FDB implementation only supports local addresses [ 211.736485][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.744052][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.811697][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.819023][T10673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.826545][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.833739][T10673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.865901][T10673] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 211.876467][T10284] bond0: (slave wlan1): link status definitely down, disabling slave [ 211.894393][T10679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1365'. [ 211.927114][T10284] bond0: (slave bond1): link status definitely down, disabling slave [ 211.953591][T10570] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.961296][T10570] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.981188][T10570] bridge_slave_1: entered allmulticast mode [ 211.988445][T10570] bridge_slave_1: entered promiscuous mode [ 212.030792][T10679] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.041155][T10679] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.050024][T10679] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.059475][T10679] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 212.074524][T10682] pimreg: entered allmulticast mode [ 212.080486][T10645] lo speed is unknown, defaulting to 1000 [ 212.080528][T10684] pimreg: left allmulticast mode [ 212.136032][T10570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.159139][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 212.160331][ T11] Dead loop on virtual device ipvlan1, fix it urgently! [ 212.206336][T10570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.268322][T10688] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.286587][T10688] netlink: 'syz.4.1368': attribute type 10 has an invalid length. [ 212.335088][T10570] team0: Port device team_slave_0 added [ 212.392802][T10570] team0: Port device team_slave_1 added [ 212.457623][T10570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.467011][T10570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.493222][ T5840] Bluetooth: hci3: command tx timeout [ 212.508728][T10570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.605212][T10570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.612586][T10570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.640793][T10570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.854232][T10570] hsr_slave_0: entered promiscuous mode [ 212.875118][T10570] hsr_slave_1: entered promiscuous mode [ 213.035968][T10699] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1372'. [ 213.051284][T10698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1372'. [ 213.764733][T10570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.806819][T10570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.895895][T10570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.985819][T10570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.049240][T10739] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 214.096242][T10739] bond7: entered promiscuous mode [ 214.111676][T10739] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.218232][T10742] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.243971][T10742] bond7: (slave bond8): making interface the new active one [ 214.285535][T10742] bond8: entered promiscuous mode [ 214.297359][T10742] bond7: (slave bond8): Enslaving as an active interface with an up link [ 214.488551][T10570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.546391][T10570] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.563524][ T5840] Bluetooth: hci3: command tx timeout [ 214.602386][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.609657][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.635415][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.642639][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.673086][T10754] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.062660][T10570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.135522][T10768] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1388'. [ 215.166065][T10570] veth0_vlan: entered promiscuous mode [ 215.202276][T10570] veth1_vlan: entered promiscuous mode [ 215.274005][T10570] veth0_macvtap: entered promiscuous mode [ 215.298615][T10570] veth1_macvtap: entered promiscuous mode [ 215.355372][T10570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.393233][T10570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.409600][T10570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.431722][T10570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.453466][T10570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.497012][T10570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.527869][T10570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.541736][T10570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.562344][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 215.581263][T10570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.597605][T10570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.611930][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 215.628460][T10570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.657950][T10570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.692345][T10570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.711100][T10570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.930550][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.956184][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.966395][T10793] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 216.101809][T10793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.114025][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.122227][T10799] Cannot find del_set index 4 as target [ 216.158775][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.231790][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 216.898319][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 217.104238][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.334693][T10839] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.393174][T10840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1408'. [ 217.521439][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.532061][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.549843][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.559421][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.575710][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.592669][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.634494][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.783431][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 217.846740][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.985665][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.031115][T10843] vxcan1 speed is unknown, defaulting to 1000 [ 218.201260][ T11] bridge_slave_1: left allmulticast mode [ 218.210404][ T11] bridge_slave_1: left promiscuous mode [ 218.228142][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.277844][ T11] bridge_slave_0: left allmulticast mode [ 218.286268][ T11] bridge_slave_0: left promiscuous mode [ 218.292461][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.991135][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.008541][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.025128][ T11] bond0 (unregistering): Released all slaves [ 219.046958][T10843] lo speed is unknown, defaulting to 1000 [ 219.173018][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 219.387545][T10882] bond0: entered promiscuous mode [ 219.423044][T10882] bond0: left promiscuous mode [ 219.436684][T10875] netlink: 'syz.4.1418': attribute type 12 has an invalid length. [ 219.666270][T10843] chnl_net:caif_netlink_parms(): no params data found [ 219.674294][ T5840] Bluetooth: hci3: command tx timeout [ 220.122113][T10908] x_tables: duplicate underflow at hook 3 [ 220.314121][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 220.350322][ T11] hsr_slave_0: left promiscuous mode [ 220.371615][ T11] hsr_slave_1: left promiscuous mode [ 220.390182][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.421211][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.459401][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.493284][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.587018][ T11] veth1_macvtap: left promiscuous mode [ 220.611786][ T11] veth0_macvtap: left promiscuous mode [ 220.617440][ T11] veth1_vlan: left promiscuous mode [ 220.641236][ T11] veth0_vlan: left promiscuous mode [ 220.719416][T10927] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1429'. [ 221.751198][ T5840] Bluetooth: hci3: command tx timeout [ 221.779571][ T11] team0 (unregistering): Port device team_slave_1 removed [ 221.835604][ T11] team0 (unregistering): Port device team_slave_0 removed [ 222.262313][T10843] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.269621][T10843] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.277863][T10843] bridge_slave_0: entered allmulticast mode [ 222.290998][T10843] bridge_slave_0: entered promiscuous mode [ 222.327535][T10843] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.357990][T10843] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.387052][T10843] bridge_slave_1: entered allmulticast mode [ 222.420664][T10843] bridge_slave_1: entered promiscuous mode [ 222.514456][T10843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.514489][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1433'. [ 222.568076][T10843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.665298][T10915] vxcan1 speed is unknown, defaulting to 1000 [ 222.726957][T10843] team0: Port device team_slave_0 added [ 222.759879][T10843] team0: Port device team_slave_1 added [ 222.904015][T10843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.921147][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.004058][T10843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.043761][T10915] lo speed is unknown, defaulting to 1000 [ 223.045953][T10843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.056792][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.083819][T10843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.204611][T10843] hsr_slave_0: entered promiscuous mode [ 223.236278][T10843] hsr_slave_1: entered promiscuous mode [ 223.266805][T10974] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 223.385070][T10978] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 223.398370][T10982] netlink: 'syz.4.1443': attribute type 2 has an invalid length. [ 223.414358][T10978] macvlan2: entered allmulticast mode [ 223.425540][T10978] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 223.442830][T10978] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 223.456943][T10978] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 223.834356][ T5840] Bluetooth: hci3: command tx timeout [ 223.990121][T10997] pim6reg1: entered promiscuous mode [ 224.013159][T10997] pim6reg1: entered allmulticast mode [ 224.151636][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 224.198469][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 224.331875][T11009] sctp: [Deprecated]: syz.4.1454 (pid 11009) Use of int in maxseg socket option. [ 224.331875][T11009] Use struct sctp_assoc_value instead [ 224.704957][T10843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.753773][T10843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.800631][T10843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.843623][T10843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.921233][T11022] vxcan1 speed is unknown, defaulting to 1000 [ 225.067404][T11037] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1464'. [ 225.070119][T10843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.113817][T11041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1464'. [ 225.133006][T11037] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.145228][T10843] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.181913][T10284] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.189075][T10284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.253262][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.260444][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.319987][T11022] lo speed is unknown, defaulting to 1000 [ 225.455264][T11055] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1469'. [ 225.522963][T11054] pimreg3: entered allmulticast mode [ 225.678708][T10843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.727272][T10843] veth0_vlan: entered promiscuous mode [ 225.772717][T10843] veth1_vlan: entered promiscuous mode [ 225.856545][T10843] veth0_macvtap: entered promiscuous mode [ 225.876024][T10843] veth1_macvtap: entered promiscuous mode [ 225.924618][ T5840] Bluetooth: hci3: command tx timeout [ 225.939719][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.950827][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.961665][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.972441][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.983535][T10843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.023560][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.034504][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.045869][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.056727][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.082182][T10843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.110883][T11022] vxcan1 speed is unknown, defaulting to 1000 [ 226.133340][T10843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.149321][T10843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.166044][T10843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.181761][T10843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.457579][T10284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.481518][T10284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.532885][T11084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1476'. [ 226.543810][T11082] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1475'. [ 226.568972][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'. [ 226.587875][T11084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1476'. [ 226.606724][T11022] lo speed is unknown, defaulting to 1000 [ 226.610129][T10284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.642543][T10284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.740674][T11091] bridge: RTM_NEWNEIGH with invalid ether address [ 226.799332][T11086] TCP: TCP_TX_DELAY enabled [ 226.812377][T11094] netlink: 'syz.3.1478': attribute type 1 has an invalid length. [ 227.122196][T11106] netlink: 'syz.0.1480': attribute type 4 has an invalid length. [ 227.331393][T11108] vxcan1 speed is unknown, defaulting to 1000 [ 227.464032][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 227.567311][T11108] lo speed is unknown, defaulting to 1000 [ 227.956055][T11127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1488'. [ 228.855090][T11135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1490'. [ 229.494852][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cd8c000: rx timeout, send abort [ 229.503306][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cd8e000: rx timeout, send abort [ 229.511981][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cd8c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 229.526389][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cd8e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.022966][ T3564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.147598][T11168] vlan1: entered promiscuous mode [ 230.189455][T11168] vlan1: entered allmulticast mode [ 230.244304][ T3564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.278713][T11171] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 230.439814][ T3564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.459509][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.473552][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.481623][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.492640][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.500619][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.508151][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.722738][ T3564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.029272][T11202] sctp: [Deprecated]: syz.0.1507 (pid 11202) Use of int in maxseg socket option. [ 231.029272][T11202] Use struct sctp_assoc_value instead [ 231.059737][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 231.137362][ T3564] bridge_slave_1: left allmulticast mode [ 231.155515][ T3564] bridge_slave_1: left promiscuous mode [ 231.171612][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.216784][ T3564] bridge_slave_0: left allmulticast mode [ 231.250516][ T3564] bridge_slave_0: left promiscuous mode [ 231.270949][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.984035][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.039894][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.093059][ T3564] bond0 (unregistering): Released all slaves [ 232.126415][T11174] lo speed is unknown, defaulting to 1000 [ 232.231397][T11230] netlink: 'syz.1.1514': attribute type 9 has an invalid length. [ 232.518981][T11206] vxcan1 speed is unknown, defaulting to 1000 [ 232.551530][ T5840] Bluetooth: hci3: command tx timeout [ 232.721221][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 233.370580][T11266] team0: Port device bond0 removed [ 233.378613][T11266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.398826][T11266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.417488][T11266] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 233.438254][T11266] bond0 (unregistering): (slave bond1): Releasing backup interface [ 233.460733][T11266] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 233.470287][T11266] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.477589][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.508976][T11266] bond0 (unregistering): Released all slaves [ 233.526220][T11174] chnl_net:caif_netlink_parms(): no params data found [ 233.537018][T11269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1523'. [ 233.564311][T11206] lo speed is unknown, defaulting to 1000 [ 233.591254][T11220] vxcan1 speed is unknown, defaulting to 1000 [ 233.762728][T11276] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3) [ 233.919538][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 233.941255][T11220] lo speed is unknown, defaulting to 1000 [ 234.007920][ T3564] hsr_slave_0: left promiscuous mode [ 234.013936][ T3564] hsr_slave_1: left promiscuous mode [ 234.020042][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.027682][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.040044][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.047707][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.075612][ T3564] veth1_macvtap: left promiscuous mode [ 234.082456][ T3564] veth0_macvtap: left promiscuous mode [ 234.088114][ T3564] veth1_vlan: left promiscuous mode [ 234.093548][ T3564] veth0_vlan: left promiscuous mode [ 234.525053][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 234.631260][ T5840] Bluetooth: hci3: command tx timeout [ 234.650462][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 235.081084][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.097607][T11174] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.121336][T11174] bridge_slave_0: entered allmulticast mode [ 235.138192][T11174] bridge_slave_0: entered promiscuous mode [ 235.143625][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 235.147969][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.165789][T11174] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.173075][T11174] bridge_slave_1: entered allmulticast mode [ 235.180152][T11174] bridge_slave_1: entered promiscuous mode [ 235.318233][T11174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.339470][T11174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.671808][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 235.672069][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 235.808058][T11174] team0: Port device team_slave_0 added [ 235.817345][T11174] team0: Port device team_slave_1 added [ 235.909310][T11321] Dead loop on virtual device ipvlan1, fix it urgently! [ 236.501640][T11174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.509179][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.556771][T11174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.719970][ T5840] Bluetooth: hci3: command tx timeout [ 236.760520][T11174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.801859][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.873225][T11174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.022632][T11174] hsr_slave_0: entered promiscuous mode [ 237.051367][T11174] hsr_slave_1: entered promiscuous mode [ 237.148196][T11343] vxcan1 speed is unknown, defaulting to 1000 [ 237.455273][T11343] lo speed is unknown, defaulting to 1000 [ 237.480521][T11353] ip6gre2: entered allmulticast mode [ 237.984340][T11377] can: request_module (can-proto-0) failed. [ 238.101700][T11174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.184804][T11174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.345253][T11398] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 238.373483][T11174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.404446][T11174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.437181][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1556'. [ 238.513562][T11174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.553291][T11174] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.567204][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.574431][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.600382][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.607615][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.802104][ T5840] Bluetooth: hci3: command tx timeout [ 238.902064][T11416] vlan1: entered promiscuous mode [ 238.946450][T11174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.075436][T11174] veth0_vlan: entered promiscuous mode [ 239.100409][T11174] veth1_vlan: entered promiscuous mode [ 239.168042][T11174] veth0_macvtap: entered promiscuous mode [ 239.187448][T11174] veth1_macvtap: entered promiscuous mode [ 239.216477][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 239.218048][T11426] vxcan1 speed is unknown, defaulting to 1000 [ 239.242370][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 239.251565][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.265670][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.276324][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.287335][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.316835][T11174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.339570][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.350552][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.362068][T11174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.372688][T11174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.383958][T11174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.397003][T11174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.411798][T11174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.438449][T11174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.456208][T11174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.473887][T11426] : renamed from ipvlan1 [ 239.625754][ T9024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.650160][ T9024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.729865][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.733931][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 239.750574][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 239.759574][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.783418][T11438] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.1568'. [ 240.011696][T11446] batadv1: entered promiscuous mode [ 240.037812][T11446] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.151725][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 240.600690][T11474] : entered promiscuous mode [ 240.717443][T11483] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 240.726365][T11483] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1581'. [ 240.736098][T11483] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 240.752186][T11482] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 240.769853][T11482] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1583'. [ 240.795639][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 240.823554][T11482] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 240.948801][T11493] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 241.097759][T11507] SET target dimension over the limit! [ 241.175913][T11493] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 241.363752][ T9024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.479417][T11488] vxcan1 speed is unknown, defaulting to 1000 [ 241.656086][T11488] lo speed is unknown, defaulting to 1000 [ 242.347238][T11532] netlink: 'syz.3.1593': attribute type 21 has an invalid length. [ 242.366681][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 242.394378][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1593'. [ 242.432953][T11532] netlink: 'syz.3.1593': attribute type 20 has an invalid length. [ 242.467441][ T9024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.698188][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.708063][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.720436][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.736327][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.746434][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 242.754867][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.828765][T11553] netlink: 'syz.0.1598': attribute type 10 has an invalid length. [ 242.838723][ T9024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.878668][ T5840] Bluetooth: hci0: command tx timeout [ 242.892236][T11557] netlink: 'syz.0.1598': attribute type 10 has an invalid length. [ 242.928034][T11553] batman_adv: batadv0: Adding interface: team0 [ 242.934503][T11553] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.961129][T11553] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 242.976414][T11557] team0: entered promiscuous mode [ 242.989516][T11557] team_slave_0: entered promiscuous mode [ 242.995742][T11557] team_slave_1: entered promiscuous mode [ 243.001682][T11557] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 243.022064][T11557] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.028910][T11557] batman_adv: batadv0: Interface activated: team0 [ 243.044286][T11557] batman_adv: batadv0: Interface deactivated: team0 [ 243.051222][T11557] batman_adv: batadv0: Removing interface: team0 [ 243.058504][T11557] bridge0: port 3(team0) entered blocking state [ 243.065382][T11557] bridge0: port 3(team0) entered disabled state [ 243.072269][T11557] team0: entered allmulticast mode [ 243.077422][T11557] team_slave_0: entered allmulticast mode [ 243.083264][T11557] team_slave_1: entered allmulticast mode [ 243.089035][T11557] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 243.130907][ T9024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.244561][T11568] bond0: left promiscuous mode [ 243.249393][T11568] bond_slave_0: left promiscuous mode [ 243.282502][T11568] bond_slave_1: left promiscuous mode [ 243.299358][T11568] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 243.327222][T11569] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 243.351822][T11568] bond1: left promiscuous mode [ 243.414214][T11568] team0: Port device bond0 removed [ 243.447386][T11568] bond0: (slave bond_slave_0): Releasing backup interface [ 243.471979][T11568] bond0: (slave bond_slave_1): Releasing backup interface [ 243.480385][T11576] Dead loop on virtual device ipvlan1, fix it urgently! [ 243.508796][T11568] team_slave_0: left promiscuous mode [ 243.533035][T11568] infiniband s: set down [ 243.547717][T11568] team0: Port device team_slave_0 removed [ 243.565798][T11568] team_slave_1: left promiscuous mode [ 243.612531][T11568] team0: Port device team_slave_1 removed [ 243.619289][T11568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.627348][T11568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.844272][T11568] bond0: (slave wlan1): Releasing backup interface [ 243.860647][T11568] bond0: (slave bond1): Releasing backup interface [ 243.891544][T11568] bond3: (slave gretap2): Releasing active interface [ 243.913427][T11568] bond5: (slave bond6): Releasing backup interface [ 243.938202][T11568] bond7: (slave bond8): Releasing backup interface [ 243.946091][T11568] bond8: left promiscuous mode [ 243.980473][T11569] bond0: (slave wlan1): Opening slave failed [ 244.033130][T11546] vxcan1 speed is unknown, defaulting to 1000 [ 244.113861][ T9024] bridge_slave_1: left allmulticast mode [ 244.141021][ T9024] bridge_slave_1: left promiscuous mode [ 244.157090][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.177723][ T9024] bridge_slave_0: left allmulticast mode [ 244.187443][ T9024] bridge_slave_0: left promiscuous mode [ 244.197628][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.558245][ T9024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.571251][ T9024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.582144][ T9024] bond0 (unregistering): Released all slaves [ 244.603048][T11546] lo speed is unknown, defaulting to 1000 [ 244.760017][T11600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.775047][T11602] SET target dimension over the limit! [ 244.850008][ T5840] Bluetooth: hci3: command tx timeout [ 245.068649][T11613] __nla_validate_parse: 2 callbacks suppressed [ 245.068671][T11613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1616'. [ 245.137169][T11546] chnl_net:caif_netlink_parms(): no params data found [ 245.148885][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1617'. [ 245.300825][T11624] netlink: 'syz.4.1617': attribute type 21 has an invalid length. [ 245.418223][T11628] geneve4: entered promiscuous mode [ 245.444029][T11628] geneve4: entered allmulticast mode [ 245.682026][ T9024] hsr_slave_0: left promiscuous mode [ 245.698992][ T9024] hsr_slave_1: left promiscuous mode [ 245.717032][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1621'. [ 245.726797][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.734617][ T9024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.747388][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.758020][ T9024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.794144][ T9024] veth1_macvtap: left promiscuous mode [ 245.800126][ T9024] veth0_macvtap: left promiscuous mode [ 245.810007][ T9024] veth1_vlan: left promiscuous mode [ 245.816088][ T9024] veth0_vlan: left promiscuous mode [ 246.009675][T11654] rdma_rxe: rxe_newlink: failed to add lo [ 246.393244][ T9024] team0 (unregistering): Port device team_slave_1 removed [ 246.442433][ T9024] team0 (unregistering): Port device team_slave_0 removed [ 246.871176][ T5840] Bluetooth: hci3: command tx timeout [ 246.971708][T11546] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.978878][T11546] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.999890][T11546] bridge_slave_0: entered allmulticast mode [ 247.012134][T11546] bridge_slave_0: entered promiscuous mode [ 247.024389][T11546] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.041188][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.050076][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'. [ 247.069622][T11546] bridge_slave_1: entered allmulticast mode [ 247.082221][T11546] bridge_slave_1: entered promiscuous mode [ 247.113099][T11656] infiniband syz0: set down [ 247.180517][ T11] smc: removing ib device syz0 [ 247.298795][T10081] vxcan1 speed is unknown, defaulting to 1000 [ 247.307713][T11669] tipc: Enabled bearer , priority 0 [ 247.341461][T11672] xt_addrtype: ipv6 does not support BROADCAST matching [ 247.378230][T11546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.451647][T11546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.745827][T11546] team0: Port device team_slave_0 added [ 247.828336][T11546] team0: Port device team_slave_1 added [ 248.010557][T11688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.032068][T11546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.039193][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.099132][T11546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.119203][T11546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.127597][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.164868][ T5911] IPVS: starting estimator thread 0... [ 248.177991][T11546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.205342][T11687] pim6reg: left allmulticast mode [ 248.261074][T11695] IPVS: using max 20 ests per chain, 48000 per kthread [ 248.352845][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 248.594908][T11546] hsr_slave_0: entered promiscuous mode [ 248.679106][T11546] hsr_slave_1: entered promiscuous mode [ 248.951490][ T5840] Bluetooth: hci3: command tx timeout [ 249.049309][T11716] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1642'. [ 249.518144][T11729] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 249.538811][T11729] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1646'. [ 249.905620][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 249.940581][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 249.949580][T11546] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.093707][T11546] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.114592][T11760] pim6reg: entered allmulticast mode [ 250.134239][T11747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1652'. [ 250.158978][T11546] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.214061][T11546] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.224064][T11755] pim6reg: left allmulticast mode [ 250.342546][T11546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.374454][T11546] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.392635][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.399816][ T9024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.440267][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.447471][ T9024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.753169][T11546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.763716][T11546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.031802][ T5840] Bluetooth: hci3: command tx timeout [ 251.086116][T11546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.223658][T11546] veth0_vlan: entered promiscuous mode [ 251.246919][T11546] veth1_vlan: entered promiscuous mode [ 251.320945][T11546] veth0_macvtap: entered promiscuous mode [ 251.344349][T11546] veth1_macvtap: entered promiscuous mode [ 251.362568][T11546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.373291][T11546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.384497][T11546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.395479][T11546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.406204][T11546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.416200][T11546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.426693][T11546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.438348][T11546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.451825][T11546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.460786][T11546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.469767][T11546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.478581][T11546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.604229][T10285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.635897][T10285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.661886][T11364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.670063][T11364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.770210][T11814] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1669'. [ 252.197133][T11829] IPv6: sit1: Disabled Multicast RS [ 252.375883][T11841] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 252.409246][T11839] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1678'. [ 252.423660][T11821] lo speed is unknown, defaulting to 1000 [ 252.451232][T11841] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1678'. [ 252.676995][T11827] xt_policy: output policy not valid in PREROUTING and INPUT [ 252.709846][T11821] netlink: 'syz.1.1672': attribute type 21 has an invalid length. [ 252.718446][T11821] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1672'. [ 252.728102][T11821] netlink: 'syz.1.1672': attribute type 5 has an invalid length. [ 252.735986][T11821] netlink: 'syz.1.1672': attribute type 6 has an invalid length. [ 252.746150][T11821] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1672'. [ 252.920504][T11865] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 252.969791][T11865] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 253.316723][T11869] lo speed is unknown, defaulting to 1000 [ 253.774686][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.615447][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'. [ 254.663476][T11906] syzkaller1: entered promiscuous mode [ 254.679284][T11906] syzkaller1: entered allmulticast mode [ 254.792063][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.829895][T11918] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 255.088174][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.236486][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.246677][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.256865][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.269972][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.290597][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.299642][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 255.314040][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.538789][ T11] bridge_slave_1: left allmulticast mode [ 255.550473][ T11] bridge_slave_1: left promiscuous mode [ 255.562533][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.582618][ T11] bridge_slave_0: left allmulticast mode [ 255.588458][ T11] bridge_slave_0: left promiscuous mode [ 255.601390][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.119119][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.130459][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.146038][ T11] bond0 (unregistering): Released all slaves [ 256.165602][T11942] lo speed is unknown, defaulting to 1000 [ 256.412966][T11969] netlink: 'syz.3.1709': attribute type 4 has an invalid length. [ 256.429294][T11937] lo speed is unknown, defaulting to 1000 [ 256.435659][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1709'. [ 256.577871][T11976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1710'. [ 256.606857][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 256.951816][T11987] tipc: Enabled bearer , priority 0 [ 256.984222][T11992] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 257.028777][T11992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1713'. [ 257.049199][ T11] hsr_slave_0: left promiscuous mode [ 257.059847][ T11] hsr_slave_1: left promiscuous mode [ 257.069642][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.082871][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.091474][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.102434][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.144023][ T11] veth1_macvtap: left promiscuous mode [ 257.149583][ T11] veth0_macvtap: left promiscuous mode [ 257.159030][ T11] veth1_vlan: left promiscuous mode [ 257.164398][ T11] veth0_vlan: left promiscuous mode [ 257.361269][ T5840] Bluetooth: hci3: command tx timeout [ 257.592646][ T11] team0 (unregistering): Port device team_slave_1 removed [ 257.634465][ T11] team0 (unregistering): Port device team_slave_0 removed [ 258.019427][T11987] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 258.027904][T11987] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 258.042345][T11992] batman_adv: batadv0: Adding interface: vlan1 [ 258.048958][T11992] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.075400][ T5911] tipc: Node number set to 3902008566 [ 258.077501][T11992] batman_adv: batadv0: Interface activated: vlan1 [ 258.130229][T11937] chnl_net:caif_netlink_parms(): no params data found [ 258.311611][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.330494][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.352062][T11937] bridge_slave_0: entered allmulticast mode [ 258.359430][T11937] bridge_slave_0: entered promiscuous mode [ 258.369757][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.396563][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.413169][T11937] bridge_slave_1: entered allmulticast mode [ 258.420525][T11937] bridge_slave_1: entered promiscuous mode [ 258.665021][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.681966][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.788587][T11937] team0: Port device team_slave_0 added [ 258.798359][T11937] team0: Port device team_slave_1 added [ 258.841675][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.851075][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.904862][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.929981][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.947469][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.957844][T12029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1723'. [ 258.990312][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1723'. [ 258.995672][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.038309][T12019] lo speed is unknown, defaulting to 1000 [ 259.209593][T11937] hsr_slave_0: entered promiscuous mode [ 259.216154][T11937] hsr_slave_1: entered promiscuous mode [ 259.431236][ T5840] Bluetooth: hci3: command tx timeout [ 260.053569][T12063] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 260.063903][T12063] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 260.101456][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1733'. [ 260.467645][T11937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.516224][T12082] Dead loop on virtual device ipvlan1, fix it urgently! [ 260.556731][T11937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.587736][T11937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.615820][T11937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.845054][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.885125][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.943499][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.950677][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.983202][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.990579][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.203275][T12112] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1748'. [ 261.224246][T12112] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1748'. [ 261.248349][T12112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1748'. [ 261.267504][T12112] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 261.346548][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.480782][T11937] veth0_vlan: entered promiscuous mode [ 261.505384][T11937] veth1_vlan: entered promiscuous mode [ 261.521220][ T5840] Bluetooth: hci3: command tx timeout [ 261.594043][T12127] netlink: 'syz.4.1752': attribute type 13 has an invalid length. [ 261.602438][T12127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1752'. [ 261.632156][T11937] veth0_macvtap: entered promiscuous mode [ 261.654631][T11937] veth1_macvtap: entered promiscuous mode [ 261.702067][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.713885][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.739310][T11937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.764116][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.774855][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.784891][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.795440][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.806599][T11937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.816500][T11937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.825360][T11937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.834411][T11937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.843231][T11937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.881938][T12138] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1756'. [ 262.031131][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.056752][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.108440][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.123396][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.131709][T12148] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1757'. [ 262.272840][T12150] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 262.288672][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1761'. [ 262.323504][T12152] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 262.332095][T12152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1760'. [ 262.367070][T12152] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 262.655295][T12159] mac80211_hwsim hwsim11 : renamed from wlan1 [ 263.636138][T12189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.669194][T12181] xt_bpf: check failed: parse error [ 263.676908][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.724466][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 264.650442][T12196] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 264.660814][T12197] delete_channel: no stack [ 264.713871][T12199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'. [ 264.737031][T12199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1776'. [ 264.761249][T12198] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 264.784698][T12201] ip6gretap1: entered promiscuous mode [ 264.790237][T12201] ip6gretap1: entered allmulticast mode [ 264.947099][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.958496][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.967327][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.978008][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.993619][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 265.001811][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.037357][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.049881][T12208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.168539][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 265.219149][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.233665][T12205] lo speed is unknown, defaulting to 1000 [ 265.388642][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1788'. [ 265.420184][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.691969][T12205] chnl_net:caif_netlink_parms(): no params data found [ 266.102124][T12253] tun0: tun_chr_ioctl cmd 1074025677 [ 266.107577][T12233] lo speed is unknown, defaulting to 1000 [ 266.119184][T12253] tun0: linktype set to 773 [ 266.153860][T12256] netlink: 'syz.0.1793': attribute type 10 has an invalid length. [ 266.302303][ T53] bridge_slave_1: left allmulticast mode [ 266.316993][ T53] bridge_slave_1: left promiscuous mode [ 266.330250][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.358518][ T53] bridge_slave_0: left allmulticast mode [ 266.370044][ T53] bridge_slave_0: left promiscuous mode [ 266.380779][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.944749][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.957722][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.968610][ T53] bond0 (unregistering): Released all slaves [ 267.031196][ T55] Bluetooth: hci3: command tx timeout [ 267.112300][T12280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.123245][T12280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0 [ 267.134026][T12280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 49040 - 0 [ 267.229033][T12205] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.264506][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.280029][T12205] bridge_slave_0: entered allmulticast mode [ 267.293536][T12205] bridge_slave_0: entered promiscuous mode [ 267.423590][T12280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.441333][T12280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0 [ 267.461356][T12280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 49040 - 0 [ 267.491562][T12205] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.499394][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.518848][T12205] bridge_slave_1: entered allmulticast mode [ 267.543764][T12205] bridge_slave_1: entered promiscuous mode [ 267.688931][T12311] netlink: 'syz.3.1810': attribute type 9 has an invalid length. [ 267.728482][T12280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.739231][T12280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0 [ 267.750719][T12280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 49040 - 0 [ 267.784931][T12205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.899724][T12205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.933975][T12280] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 267.951150][T12280] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 267.974319][T12280] team0: Port device netdevsim0 removed [ 267.982266][T12280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.993823][T12280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0 [ 268.009995][T12280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 49040 - 0 [ 268.072291][T12205] team0: Port device team_slave_0 added [ 268.089700][T12205] team0: Port device team_slave_1 added [ 268.144467][T12205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.152302][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.179818][T12205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.199613][T12205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.216624][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.247685][T12205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.287534][T12280] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 49040 - 0 [ 268.321618][T12280] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 38304 - 0 [ 268.329973][T12280] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 268.338812][T12337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.378764][T12280] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 49040 - 0 [ 268.401065][T12280] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 38304 - 0 [ 268.428336][T12280] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 268.479712][ T53] hsr_slave_0: left promiscuous mode [ 268.502424][ T53] hsr_slave_1: left promiscuous mode [ 268.508701][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.525522][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.538590][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.556552][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.607593][ T53] veth1_macvtap: left promiscuous mode [ 268.618968][ T53] veth0_macvtap: left promiscuous mode [ 268.628341][ T53] veth1_vlan: left promiscuous mode [ 268.649510][ T53] veth0_vlan: left promiscuous mode [ 269.116313][ T53] team0 (unregistering): Port device team_slave_1 removed [ 269.121112][ T55] Bluetooth: hci3: command tx timeout [ 269.168600][ T53] team0 (unregistering): Port device team_slave_0 removed [ 269.579750][T12280] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 49040 - 0 [ 269.589416][T12280] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 38304 - 0 [ 269.605870][T12280] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 269.696163][T12280] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 49040 - 0 [ 269.741113][T12280] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 38304 - 0 [ 269.749550][T12280] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 269.829422][T12205] hsr_slave_0: entered promiscuous mode [ 269.859754][T12349] Dead loop on virtual device ipvlan1, fix it urgently! [ 269.893346][T12205] hsr_slave_1: entered promiscuous mode [ 270.004279][T12357] __nla_validate_parse: 5 callbacks suppressed [ 270.004303][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 270.034565][T12362] netlink: 'syz.1.1821': attribute type 9 has an invalid length. [ 270.057730][T12359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1822'. [ 270.083580][T12355] sctp: [Deprecated]: syz.0.1819 (pid 12355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.083580][T12355] Use struct sctp_sack_info instead [ 270.226912][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 270.334521][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 270.370761][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 270.381353][T12368] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.572769][T12372] bond0 (unregistering): Released all slaves [ 270.618572][T12379] syzkaller1: entered promiscuous mode [ 270.633535][T12379] syzkaller1: entered allmulticast mode [ 270.647026][T12383] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 270.676668][T12384] bridge0: port 1(gretap0) entered blocking state [ 270.690172][T12384] bridge0: port 1(gretap0) entered disabled state [ 270.706737][T12384] gretap0: entered allmulticast mode [ 270.718157][T12384] gretap0: entered promiscuous mode [ 270.974669][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 271.038881][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'. [ 271.207682][ T55] Bluetooth: hci3: command tx timeout [ 271.337533][T12423] netlink: 'syz.3.1834': attribute type 9 has an invalid length. [ 271.542744][T12434] sctp: [Deprecated]: syz.1.1836 (pid 12434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.542744][T12434] Use struct sctp_sack_info instead [ 271.605604][T12434] nftables ruleset with unbound chain [ 271.626458][T12205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.683842][T12205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.748961][T12205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.794747][T12205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.039005][T12205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.081239][T12205] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.096052][T10285] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.103314][T10285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.230018][T12452] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.360498][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.367665][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.447893][T12205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.501522][T12205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.876043][T12205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.963931][T12205] veth0_vlan: entered promiscuous mode [ 273.004983][T12205] veth1_vlan: entered promiscuous mode [ 273.101399][T12205] veth0_macvtap: entered promiscuous mode [ 273.120883][T12205] veth1_macvtap: entered promiscuous mode [ 273.156371][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.177415][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.205787][T12205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.232122][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1848'. [ 273.257853][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.271475][ T55] Bluetooth: hci3: command tx timeout [ 273.295533][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.326029][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.344468][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.370465][T12205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.432006][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 273.456952][T12205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.485439][T12205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.495483][T12205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.514361][T12205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.618225][T12473] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.651375][T12473] 0ªX¹¦À: left allmulticast mode [ 273.661193][T12473] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 273.712415][T12480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.866379][T10285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.891657][T10285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.958453][T11364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.973266][T11364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.036846][T12487] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1854'. [ 274.047528][T12487] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 274.060477][T12487] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1854'. [ 274.195695][T12492] netlink: 'syz.1.1856': attribute type 2 has an invalid length. [ 275.048838][T12512] lo speed is unknown, defaulting to 1000 [ 275.389983][T12529] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1867'. [ 275.788371][ T3564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.151680][ T3564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.237718][ T3564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.307138][ T3564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.387489][ T3564] bridge_slave_1: left allmulticast mode [ 276.395353][ T3564] bridge_slave_1: left promiscuous mode [ 276.401166][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.409965][ T3564] bridge_slave_0: left allmulticast mode [ 276.416309][ T3564] bridge_slave_0: left promiscuous mode [ 276.422122][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.703518][T12541] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 276.897359][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.907963][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.915922][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.925327][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.970780][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.981649][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.993809][T12560] netlink: 'syz.4.1877': attribute type 10 has an invalid length. [ 277.282672][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.293719][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.304945][ T3564] bond0 (unregistering): Released all slaves [ 277.471049][T12569] Dead loop on virtual device ipvlan1, fix it urgently! [ 277.488053][T12569] Dead loop on virtual device ipvlan1, fix it urgently! [ 277.496679][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 277.788401][T12556] lo speed is unknown, defaulting to 1000 [ 278.166750][ T3564] hsr_slave_0: left promiscuous mode [ 278.264889][ T3564] hsr_slave_1: left promiscuous mode [ 278.273731][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.286237][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.295649][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.310731][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.412912][ T3564] veth1_macvtap: left promiscuous mode [ 278.418593][ T3564] veth0_macvtap: left promiscuous mode [ 278.425462][ T3564] veth1_vlan: left promiscuous mode [ 278.431688][ T3564] veth0_vlan: left promiscuous mode [ 279.009129][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 279.057181][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 279.111252][ T5840] Bluetooth: hci3: command tx timeout [ 279.802567][T12556] chnl_net:caif_netlink_parms(): no params data found [ 279.872384][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 280.075717][T12654] syz.1.1899: vmalloc error: size 26722304, failed to allocated page array size 52192, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 280.119785][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.1.1899 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 280.130648][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.140095][T12661] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 280.140709][T12654] Call Trace: [ 280.140721][T12654] [ 280.154747][T12654] dump_stack_lvl+0x241/0x360 [ 280.159439][T12654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.164642][T12654] ? __pfx__printk+0x10/0x10 [ 280.169238][T12654] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 280.175667][T12654] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 280.182200][T12654] warn_alloc+0x278/0x410 [ 280.186541][T12654] ? __pfx_warn_alloc+0x10/0x10 [ 280.191403][T12654] ? do_replace_finish+0xcc/0x1b10 [ 280.196522][T12654] ? __get_vm_area_node+0x1c8/0x2d0 [ 280.201735][T12654] ? __get_vm_area_node+0x25c/0x2d0 [ 280.206948][T12654] __vmalloc_node_range_noprof+0x62f/0x1380 [ 280.212844][T12654] ? pfn_valid+0x40e/0x450 [ 280.217276][T12654] ? mark_lock+0x9a/0x360 [ 280.221619][T12654] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.227985][T12654] ? do_replace_finish+0xcc/0x1b10 [ 280.233109][T12654] vmalloc_noprof+0x79/0x90 [ 280.237615][T12654] ? do_replace_finish+0xcc/0x1b10 [ 280.242731][T12654] do_replace_finish+0xcc/0x1b10 [ 280.247703][T12654] ? __pfx___might_resched+0x10/0x10 [ 280.252993][T12654] ? __might_fault+0xaa/0x120 [ 280.257671][T12654] ? do_raw_spin_unlock+0x13c/0x8b0 [ 280.262870][T12654] ? __pfx_lock_release+0x10/0x10 [ 280.267931][T12654] ? _raw_spin_unlock+0x28/0x50 [ 280.272791][T12654] ? __pfx_do_replace_finish+0x10/0x10 [ 280.278264][T12654] ? __might_fault+0xc6/0x120 [ 280.282949][T12654] do_replace+0x450/0x5b0 [ 280.287282][T12654] ? finish_task_switch+0x1e5/0x870 [ 280.292494][T12654] ? __pfx_do_replace+0x10/0x10 [ 280.297359][T12654] ? bpf_lsm_capable+0x9/0x10 [ 280.302039][T12654] ? security_capable+0x7e/0x2d0 [ 280.306982][T12654] do_ebt_set_ctl+0x2d5/0x17d0 [ 280.311749][T12654] ? mark_lock+0x9a/0x360 [ 280.316089][T12654] ? __lock_acquire+0x1397/0x2100 [ 280.321134][T12654] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 280.326372][T12654] ? __pfx___mutex_trylock_common+0x10/0x10 [ 280.332280][T12654] ? nf_setsockopt+0x240/0x2c0 [ 280.337056][T12654] ? __pfx_lock_release+0x10/0x10 [ 280.342084][T12654] ? rcu_is_watching+0x15/0xb0 [ 280.346877][T12654] ? trace_contention_end+0x3c/0x120 [ 280.352181][T12654] ? __mutex_lock+0x37f/0xee0 [ 280.356867][T12654] ? do_ip_setsockopt+0x1f5f/0x3cd0 [ 280.362078][T12654] ? __mutex_unlock_slowpath+0x21e/0x790 [ 280.367717][T12654] ? __pfx___mutex_lock+0x10/0x10 [ 280.372776][T12654] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.378785][T12654] ? aa_sk_perm+0x96d/0xab0 [ 280.383329][T12654] ? __pfx_aa_sk_perm+0x10/0x10 [ 280.388213][T12654] nf_setsockopt+0x295/0x2c0 [ 280.392834][T12654] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 280.398736][T12654] do_sock_setsockopt+0x3af/0x720 [ 280.403778][T12654] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 280.409334][T12654] ? __fget_files+0x395/0x410 [ 280.414020][T12654] ? __fget_files+0x2a/0x410 [ 280.418628][T12654] __x64_sys_setsockopt+0x1ee/0x280 [ 280.423855][T12654] do_syscall_64+0xf3/0x230 [ 280.428368][T12654] ? clear_bhb_loop+0x35/0x90 [ 280.433060][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.438969][T12654] RIP: 0033:0x7f2c32385d29 [ 280.443392][T12654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.462999][T12654] RSP: 002b:00007f2c33142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.471424][T12654] RAX: ffffffffffffffda RBX: 00007f2c32575fa0 RCX: 00007f2c32385d29 [ 280.479403][T12654] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 280.487378][T12654] RBP: 00007f2c32401b08 R08: 00000000000001f0 R09: 0000000000000000 [ 280.495348][T12654] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 280.503360][T12654] R13: 0000000000000000 R14: 00007f2c32575fa0 R15: 00007ffec51d6a48 [ 280.511373][T12654] [ 280.515993][T12654] Mem-Info: [ 280.519153][T12654] active_anon:7640 inactive_anon:0 isolated_anon:0 [ 280.519153][T12654] active_file:1674 inactive_file:38346 isolated_file:0 [ 280.519153][T12654] unevictable:768 dirty:199 writeback:0 [ 280.519153][T12654] slab_reclaimable:11389 slab_unreclaimable:107175 [ 280.519153][T12654] mapped:28521 shmem:1430 pagetables:615 [ 280.519153][T12654] sec_pagetables:0 bounce:0 [ 280.519153][T12654] kernel_misc_reclaimable:0 [ 280.519153][T12654] free:1323025 free_pcp:440 free_cma:0 [ 280.565504][T12654] Node 0 active_anon:30520kB inactive_anon:0kB active_file:6696kB inactive_file:153312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114216kB dirty:800kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12708kB pagetables:2536kB sec_pagetables:0kB all_unreclaimable? no [ 280.598039][T12654] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 280.628440][T12654] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.655976][T12654] lowmem_reserve[]: 0 2465 2466 0 0 [ 280.661345][T12654] Node 0 DMA32 free:1368884kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:30480kB inactive_anon:0kB active_file:6696kB inactive_file:152476kB unevictable:1536kB writepending:800kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:1652kB local_pcp:948kB free_cma:0kB [ 280.691773][T12654] lowmem_reserve[]: 0 0 0 0 0 [ 280.694408][T12661] veth0_vlan: left promiscuous mode [ 280.696529][T12654] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.696595][T12654] lowmem_reserve[]: 0 0 [ 280.724989][T12661] veth0_vlan: entered promiscuous mode [ 280.728985][T12654] 0 0 0 [ 280.741571][T12654] Node 1 Normal free:3907864kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.750707][T12661] team0: Device veth0_vlan failed to register rx_handler [ 280.770470][T12654] lowmem_reserve[]: 0 0 0 0 0 [ 280.770529][T12654] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 280.795336][T12654] Node 0 DMA32: 0*4kB 7*8kB (E) 8*16kB (UME) 90*32kB (UME) 129*64kB (UME) 88*128kB (UME) 50*256kB (UME) 38*512kB (UME) 19*1024kB (UM) 10*2048kB (UME) 311*4096kB (UME) = 1368632kB [ 280.813443][T12654] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 280.825224][T12654] Node 1 Normal: 228*4kB (UE) 57*8kB (UME) 36*16kB (UME) 196*32kB (UME) 100*64kB (UME) 32*128kB (UME) 10*256kB (UM) 9*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3907864kB [ 280.843993][T12654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.853704][T12654] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.863220][T12654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.872939][T12654] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.882431][T12654] 41450 total pagecache pages [ 280.887135][T12654] 0 pages in swap cache [ 280.891371][T12654] Free swap = 124996kB [ 280.895618][T12654] Total swap = 124996kB [ 280.899794][T12654] 2097051 pages RAM [ 280.903704][T12654] 0 pages HighMem/MovableOnly [ 280.908495][T12654] 427011 pages reserved [ 280.912762][T12654] 0 pages cma reserved [ 281.071733][T12556] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.079179][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.088283][T12556] bridge_slave_0: entered allmulticast mode [ 281.096407][T12556] bridge_slave_0: entered promiscuous mode [ 281.145593][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.169639][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.191404][ T5840] Bluetooth: hci3: command tx timeout [ 281.197674][T12556] bridge_slave_1: entered allmulticast mode [ 281.217427][T12556] bridge_slave_1: entered promiscuous mode [ 281.309905][T12556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.323828][T12556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.362776][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 281.429058][T12556] team0: Port device team_slave_0 added [ 281.456667][T12556] team0: Port device team_slave_1 added [ 281.485022][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 281.516538][T12556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.533932][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.560160][T12556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.573973][T12556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.581109][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.607485][T12556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.733077][T12692] IPv6: sit2: Disabled Multicast RS [ 281.757998][T12556] hsr_slave_0: entered promiscuous mode [ 281.776889][T12556] hsr_slave_1: entered promiscuous mode [ 281.849199][T12695] netlink: 'syz.1.1913': attribute type 5 has an invalid length. [ 281.874063][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1914'. [ 281.885194][T12695] netlink: 63 bytes leftover after parsing attributes in process `syz.1.1913'. [ 281.914852][T12703] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 282.245653][T12711] bridge1: entered promiscuous mode [ 282.256644][T12711] bridge1: entered allmulticast mode [ 282.262543][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 282.633029][T12700] lo speed is unknown, defaulting to 1000 [ 282.893294][T12556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.906821][T12741] netlink: 'syz.3.1923': attribute type 10 has an invalid length. [ 282.917411][T12556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.935198][T12556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.945618][T12556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.049281][T12743] tipc: Enabled bearer , priority 0 [ 283.062183][T12744] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 283.069747][T12744] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 283.182253][T12750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1926'. [ 283.204485][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 283.287201][ T5840] Bluetooth: hci3: command tx timeout [ 283.299239][T12556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.386388][T12556] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.438930][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.446197][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.475184][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.482481][ T9024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.565354][T12760] smc: net device bond0 applied user defined pnetid SYZ0 [ 283.605714][T12761] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49040 - 0 [ 283.615899][T12761] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0 [ 283.628446][T12761] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 283.810857][T12761] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49040 - 0 [ 283.825093][T12774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1932'. [ 283.839373][T12761] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0 [ 283.849555][T12761] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 283.868720][T12773] IPv6: sit3: Disabled Multicast RS [ 283.884662][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1933'. [ 283.885584][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'. [ 283.929498][T12761] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49040 - 0 [ 283.946351][T12780] sctp: [Deprecated]: syz.4.1932 (pid 12780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.946351][T12780] Use struct sctp_sack_info instead [ 283.949277][T12761] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0 [ 283.983209][T12761] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 284.077777][T12556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.110521][T12761] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49040 - 0 [ 284.120946][T12761] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0 [ 284.131784][T12761] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 284.196148][T12556] veth0_vlan: entered promiscuous mode [ 284.207227][T12556] veth1_vlan: entered promiscuous mode [ 284.248277][T12556] veth0_macvtap: entered promiscuous mode [ 284.259574][T12556] veth1_macvtap: entered promiscuous mode [ 284.290020][T12761] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 49040 - 0 [ 284.300029][T12761] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 38304 - 0 [ 284.319666][T12761] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 284.356828][T12761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 49040 - 0 [ 284.365803][T12761] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 38304 - 0 [ 284.375205][T12761] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 284.389546][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.414004][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.428225][T12556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.443013][T12761] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 49040 - 0 [ 284.451681][T12761] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 38304 - 0 [ 284.460340][T12761] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 284.490496][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.513089][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.523324][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.535468][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.547301][T12556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.566501][T12761] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 49040 - 0 [ 284.582994][T12761] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 38304 - 0 [ 284.602942][T12761] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 284.626127][T12556] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.652406][T12556] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.663908][T12556] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.677999][T12556] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.756045][T12810] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 284.764199][T12810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.865141][T10285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.901084][T10285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.970726][T11364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.997166][T11364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.112847][T12817] netlink: 'syz.0.1944': attribute type 3 has an invalid length. [ 285.163578][T12820] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 285.186324][T12820] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 285.620734][T12832] lo speed is unknown, defaulting to 1000 [ 286.151563][ T3564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.692027][ T3564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.908216][ T3564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.957739][ T3564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.026587][ T3564] bridge_slave_1: left allmulticast mode [ 287.032465][ T3564] bridge_slave_1: left promiscuous mode [ 287.038153][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.047178][ T3564] bridge_slave_0: left allmulticast mode [ 287.053956][ T3564] bridge_slave_0: left promiscuous mode [ 287.061276][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.229000][T12867] __nla_validate_parse: 7 callbacks suppressed [ 287.229021][T12867] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1960'. [ 287.390244][T12865] netlink: 'syz.3.1958': attribute type 9 has an invalid length. [ 287.413113][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.423933][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.439407][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.448816][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.460680][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.476876][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.562723][T12876] netlink: 'syz.4.1959': attribute type 2 has an invalid length. [ 287.673837][T12876] netlink: 'syz.4.1959': attribute type 9 has an invalid length. [ 287.692899][T12876] netlink: 170692 bytes leftover after parsing attributes in process `syz.4.1959'. [ 287.862243][T12892] sctp: [Deprecated]: syz.1.1964 (pid 12892) Use of int in max_burst socket option deprecated. [ 287.862243][T12892] Use struct sctp_assoc_value instead [ 287.988420][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.001180][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.013893][ T3564] bond0 (unregistering): Released all slaves [ 288.289317][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 288.317261][T12900] netlink: 'syz.4.1966': attribute type 30 has an invalid length. [ 288.335548][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 288.456420][T12870] lo speed is unknown, defaulting to 1000 [ 288.535754][T12908] dccp_v6_rcv: dropped packet with invalid checksum [ 288.751804][ T3564] hsr_slave_0: left promiscuous mode [ 288.770318][ T3564] hsr_slave_1: left promiscuous mode [ 288.789697][T12921] xt_hashlimit: size too large, truncated to 1048576 [ 288.796813][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.805028][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.824149][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.837403][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.858251][T12922] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1972'. [ 288.919170][ T3564] veth1_macvtap: left promiscuous mode [ 288.929437][ T3564] veth0_macvtap: left promiscuous mode [ 288.939029][ T3564] veth1_vlan: left promiscuous mode [ 288.957527][ T3564] veth0_vlan: left promiscuous mode [ 289.522697][ T55] Bluetooth: hci3: command tx timeout [ 289.645940][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 289.690209][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 290.563243][T12870] chnl_net:caif_netlink_parms(): no params data found [ 290.631649][T12929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1974'. [ 290.656556][T12929] smc: net device bond0 erased user defined pnetid SYZ0 [ 290.879899][T12870] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.906216][T12870] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.921448][T12870] bridge_slave_0: entered allmulticast mode [ 290.928681][T12870] bridge_slave_0: entered promiscuous mode [ 291.011223][T12870] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.051249][T12870] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.077701][T12870] bridge_slave_1: entered allmulticast mode [ 291.087652][T12870] bridge_slave_1: entered promiscuous mode [ 291.195648][T12961] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1982'. [ 291.205508][T12870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.218583][T12961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1982'. [ 291.228284][T12870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.236429][T12961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1982'. [ 291.246594][T12961] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1982'. [ 291.312695][T12870] team0: Port device team_slave_0 added [ 291.321396][T12870] team0: Port device team_slave_1 added [ 291.432526][T12870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.449951][T12870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.512690][T12870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.549939][T12870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.567163][T12980] netlink: 'syz.3.1988': attribute type 7 has an invalid length. [ 291.589307][T12870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.615392][ T55] Bluetooth: hci3: command tx timeout [ 291.621402][T12870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.629977][T12980] netlink: 'syz.3.1988': attribute type 11 has an invalid length. [ 291.864276][T12870] hsr_slave_0: entered promiscuous mode [ 291.899415][T12870] hsr_slave_1: entered promiscuous mode [ 292.334078][T12996] bridge_slave_0: default FDB implementation only supports local addresses [ 292.756251][T13018] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 292.862091][T13018] pim6reg1: entered allmulticast mode [ 293.051503][T12870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.091848][T12870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.142124][T12870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.180862][T12870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.329953][T12870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.401599][T12870] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.432285][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.439429][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.482615][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.489765][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.629844][T13030] lo speed is unknown, defaulting to 1000 [ 293.638569][T12870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.671416][ T55] Bluetooth: hci3: command tx timeout [ 293.733533][T13047] __nla_validate_parse: 6 callbacks suppressed [ 293.733554][T13047] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2006'. [ 293.787467][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 293.801798][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 293.816322][T13043] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2006'. [ 293.825734][T13055] netlink: 'syz.3.2008': attribute type 14 has an invalid length. [ 294.025333][T12870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.075512][T12870] veth0_vlan: entered promiscuous mode [ 294.086420][T12870] veth1_vlan: entered promiscuous mode [ 294.108613][T12870] veth0_macvtap: entered promiscuous mode [ 294.117808][T12870] veth1_macvtap: entered promiscuous mode [ 294.138331][T12870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.149009][T12870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.160250][T12870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.172832][T12870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.183346][T12870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.193270][T12870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.203774][T12870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.214821][T12870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.227736][T13062] geneve4: entered promiscuous mode [ 294.241092][T13062] geneve4: entered allmulticast mode [ 294.289839][T13068] tap0: tun_chr_ioctl cmd 1074025677 [ 294.303213][T13068] tap0: linktype set to 256 [ 294.309933][T12870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.324536][T12870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.338316][T12870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.348481][T12870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.371709][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2011'. [ 294.372165][T13064] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 294.401020][T13064] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 294.715292][T13078] netlink: 'syz.1.2014': attribute type 6 has an invalid length. [ 294.749847][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.802876][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.886809][T10284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.926925][T10284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.592160][T13101] netlink: 'syz.0.2019': attribute type 20 has an invalid length. [ 295.706646][T13103] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 295.732652][T13103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.876711][T13125] erspan1: entered promiscuous mode [ 296.888319][T13125] erspan1: entered allmulticast mode [ 297.066498][T13129] netlink: 'syz.3.2026': attribute type 6 has an invalid length. [ 297.083768][T13129] Dead loop on virtual device ipvlan1, fix it urgently! [ 297.158759][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'. [ 297.819612][ T3564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.794860][ T3564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.847896][ T3564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.919104][ T3564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.985789][ T3564] bridge_slave_1: left allmulticast mode [ 298.992725][ T3564] bridge_slave_1: left promiscuous mode [ 299.011327][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.121536][ T3564] bridge_slave_0: left allmulticast mode [ 299.137624][ T3564] bridge_slave_0: left promiscuous mode [ 299.150276][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.538481][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 299.559559][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.581852][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.596922][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.609745][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.629400][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 299.641216][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.763573][T13182] netlink: 'syz.1.2039': attribute type 19 has an invalid length. [ 300.082106][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.096500][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.107020][ T3564] bond0 (unregistering): Released all slaves [ 300.293188][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 300.302512][T13187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2040'. [ 300.509485][T13175] lo speed is unknown, defaulting to 1000 [ 300.599847][T13200] netlink: 'syz.0.2040': attribute type 4 has an invalid length. [ 300.659085][T13203] ip6t_srh: unknown srh invflags 4000 [ 301.006278][ T3564] hsr_slave_0: left promiscuous mode [ 301.009546][T13197] infiniband syz!: set down [ 301.016475][ T3564] hsr_slave_1: left promiscuous mode [ 301.023039][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.023055][T13197] infiniband syz!: added team_slave_0 [ 301.037343][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.037634][T13197] syz!: rxe_create_cq: returned err = -12 [ 301.050784][T13197] infiniband syz!: Couldn't create ib_mad CQ [ 301.056348][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.057220][T13197] infiniband syz!: Couldn't open port 1 [ 301.070093][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.094329][T13197] RDS/IB: syz!: added [ 301.098575][T13197] smc: adding ib device syz! with port count 1 [ 301.114225][T13197] smc: ib device syz! port 1 has pnetid [ 301.115813][ T3564] veth1_macvtap: left promiscuous mode [ 301.132698][ T3564] veth0_macvtap: left promiscuous mode [ 301.138509][ T3564] veth1_vlan: left promiscuous mode [ 301.144193][ T3564] veth0_vlan: left promiscuous mode [ 301.674751][ T5840] Bluetooth: hci3: command tx timeout [ 301.775869][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 301.825731][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 302.360421][T13175] chnl_net:caif_netlink_parms(): no params data found [ 302.605502][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 302.943402][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'. [ 302.951899][T13175] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.967302][T13175] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.976049][T13175] bridge_slave_0: entered allmulticast mode [ 302.990221][T13175] bridge_slave_0: entered promiscuous mode [ 303.022141][T13175] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.041180][T13175] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.081211][T13175] bridge_slave_1: entered allmulticast mode [ 303.098559][T13175] bridge_slave_1: entered promiscuous mode [ 303.167184][T13175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.187817][T13175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.246884][T13256] Dead loop on virtual device ipvlan1, fix it urgently! [ 303.254520][ C1] BUG: TASK stack guard page was hit at ffffc9000463ffb8 (stack is ffffc90004640000..ffffc90004648000) [ 303.254565][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 303.254585][ C1] CPU: 1 UID: 0 PID: 13256 Comm: syz.3.2057 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 303.254609][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.254621][ C1] RIP: 0010:validate_chain+0x119/0x5920 [ 303.254657][ C1] Code: 25 00 80 04 00 3d 00 00 04 00 0f 85 80 04 00 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 d8 2b 94 be 08 00 00 00 c2 76 8a 00 48 0f a3 1d 7a 70 b0 12 72 66 48 c7 c0 c0 49 3c 9a [ 303.254675][ C1] RSP: 0018:ffffc9000463ffc0 EFLAGS: 00010047 [ 303.254695][ C1] RAX: 0000000000000000 RBX: 0000000000000027 RCX: 1ffff920008c8018 [ 303.254710][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942bd880 [ 303.254724][ C1] RBP: ffffc900046402c0 R08: ffffffff942bd887 R09: 1ffffffff2857b10 [ 303.254740][ C1] R10: dffffc0000000000 R11: fffffbfff2857b11 R12: dffffc0000000000 [ 303.254756][ C1] R13: ffff88807d4e6988 R14: 43e81acb77b0840d R15: 0000000000000000 [ 303.254772][ C1] FS: 00007fa6fbda06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 303.254790][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.254805][ C1] CR2: ffffc9000463ffb8 CR3: 0000000033fa8000 CR4: 00000000003526f0 [ 303.254823][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.254836][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.254850][ C1] Call Trace: [ 303.254857][ C1] <#DF> [ 303.254865][ C1] ? __die_body+0x5f/0xb0 [ 303.254889][ C1] ? die+0x9e/0xc0 [ 303.254910][ C1] ? handle_stack_overflow+0x96/0xd0 [ 303.254932][ C1] ? exc_double_fault+0x178/0x1b0 [ 303.254979][ C1] ? asm_exc_double_fault+0x23/0x30 [ 303.255010][ C1] ? validate_chain+0x119/0x5920 [ 303.255036][ C1] [ 303.255043][ C1] [ 303.255059][ C1] ? __pfx_validate_chain+0x10/0x10 [ 303.255097][ C1] ? __pfx_validate_chain+0x10/0x10 [ 303.255127][ C1] ? mark_lock+0x9a/0x360 [ 303.255152][ C1] __lock_acquire+0x1397/0x2100 [ 303.255183][ C1] lock_acquire+0x1ed/0x550 [ 303.255204][ C1] ? bad_range+0x5f/0x270 [ 303.255228][ C1] ? mark_lock+0x9a/0x360 [ 303.255253][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 303.255284][ C1] ? bad_range+0x5f/0x270 [ 303.255306][ C1] seqcount_lockdep_reader_access+0x127/0x1e0 [ 303.255332][ C1] ? bad_range+0x5f/0x270 [ 303.255355][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 303.255382][ C1] ? get_page_from_freelist+0x891/0x37a0 [ 303.255403][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.255429][ C1] bad_range+0x5f/0x270 [ 303.255455][ C1] get_page_from_freelist+0x3640/0x37a0 [ 303.255480][ C1] ? validate_chain+0x15c0/0x5920 [ 303.255505][ C1] ? check_path+0x21/0x40 [ 303.255548][ C1] __alloc_pages_noprof+0x292/0x710 [ 303.255569][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 303.255593][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.255618][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 303.255641][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 303.255669][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 303.255695][ C1] ? stack_trace_save+0x118/0x1d0 [ 303.255714][ C1] ? alloc_pages_noprof+0x43/0x170 [ 303.255741][ C1] stack_depot_save_flags+0x72d/0x940 [ 303.255765][ C1] save_stack+0x109/0x1f0 [ 303.255784][ C1] ? mark_lock+0x9a/0x360 [ 303.255808][ C1] ? __pfx_save_stack+0x10/0x10 [ 303.255827][ C1] ? post_alloc_hook+0x1f3/0x230 [ 303.255854][ C1] ? get_page_from_freelist+0x365c/0x37a0 [ 303.255874][ C1] ? __alloc_pages_noprof+0x292/0x710 [ 303.255894][ C1] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 303.255918][ C1] ? stack_depot_save_flags+0x72d/0x940 [ 303.255936][ C1] ? kasan_save_track+0x51/0x80 [ 303.255955][ C1] ? kasan_save_free_info+0x40/0x50 [ 303.255988][ C1] ? __kasan_slab_free+0x59/0x70 [ 303.256008][ C1] ? kmem_cache_free_bulk+0x2d8/0x530 [ 303.256034][ C1] ? kfree_skb_list_reason+0x6c7/0x750 [ 303.256056][ C1] ? ip6_fragment+0x1c86/0x22c0 [ 303.256080][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.256102][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.256130][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.256147][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.256168][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.256197][ C1] __set_page_owner+0x92/0x800 [ 303.256217][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 303.256244][ C1] ? get_page_from_freelist+0x891/0x37a0 [ 303.256265][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.256287][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 303.256312][ C1] post_alloc_hook+0x1f3/0x230 [ 303.256341][ C1] get_page_from_freelist+0x365c/0x37a0 [ 303.256364][ C1] ? kasan_save_free_info+0x40/0x50 [ 303.256392][ C1] ? kmem_cache_free_bulk+0x2d8/0x530 [ 303.256418][ C1] ? __dev_queue_xmit+0x18d8/0x3f50 [ 303.256444][ C1] ? mark_lock+0x9a/0x360 [ 303.256469][ C1] ? __lock_acquire+0x1397/0x2100 [ 303.256501][ C1] __alloc_pages_noprof+0x292/0x710 [ 303.256523][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 303.256547][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.256577][ C1] ? arch_stack_walk+0x10e/0x150 [ 303.256602][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 303.256630][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 303.256654][ C1] ? stack_trace_save+0x118/0x1d0 [ 303.256673][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 303.256691][ C1] ? alloc_pages_noprof+0x43/0x170 [ 303.256716][ C1] stack_depot_save_flags+0x72d/0x940 [ 303.256737][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 303.256761][ C1] kasan_save_track+0x51/0x80 [ 303.256780][ C1] ? kasan_save_track+0x3f/0x80 [ 303.256798][ C1] ? kasan_save_free_info+0x40/0x50 [ 303.256825][ C1] ? __kasan_slab_free+0x59/0x70 [ 303.256844][ C1] ? kmem_cache_free_bulk+0x2d8/0x530 [ 303.256870][ C1] ? kfree_skb_list_reason+0x6c7/0x750 [ 303.256892][ C1] ? ip6_fragment+0x1c86/0x22c0 [ 303.256915][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.256937][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.256970][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.256988][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.257009][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.257032][ C1] ? ip6_finish_output2+0x1284/0x17b0 [ 303.257058][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 303.257081][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.257103][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.257130][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.257146][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.257168][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.257191][ C1] ? ip6_finish_output2+0x1284/0x17b0 [ 303.257216][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 303.257238][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.257260][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.257287][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.257304][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.257325][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.257348][ C1] ? ip6_finish_output2+0x1284/0x17b0 [ 303.257373][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 303.257396][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.257418][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.257445][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.257461][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.257483][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.257505][ C1] ? ip6_finish_output2+0x1284/0x17b0 [ 303.257531][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 303.257553][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.257575][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.257602][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.257619][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.257640][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.257663][ C1] ? ip6_finish_output2+0x1284/0x17b0 [ 303.257688][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 303.257711][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.257733][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.257761][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.257777][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.257799][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.257821][ C1] ? ip6_finish_output2+0x1284/0x17b0 [ 303.257846][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 303.257868][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.257890][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.257936][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.257953][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.257984][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.258008][ C1] ? ip6_finish_output2+0x1284/0x17b0 [ 303.258035][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 303.258060][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.258083][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.258112][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 303.258130][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.258153][ C1] ? __dev_queue_xmit+0x1b73/0x3f50 [ 303.258177][ C1] ? ip6_finish_output2+0x1284/0x17b0 [ 303.258204][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 303.258229][ C1] ? ip6_finish_output+0x2b8/0x840 [ 303.258252][ C1] ? ipvlan_queue_xmit+0x8a7/0x1190 [ 303.258281][ C1] ? build_detached_freelist+0x10f/0x260 [ 303.258312][ C1] kasan_save_free_info+0x40/0x50 [ 303.258342][ C1] __kasan_slab_free+0x59/0x70 [ 303.258364][ C1] kmem_cache_free_bulk+0x2d8/0x530 [ 303.258394][ C1] ? kfree_skb_list_reason+0x6c7/0x750 [ 303.258418][ C1] ? skb_release_data+0x6a0/0x8a0 [ 303.258448][ C1] kfree_skb_list_reason+0x6c7/0x750 [ 303.258472][ C1] ? dev_hard_start_xmit+0x27a/0x7d0 [ 303.258499][ C1] ? __pfx_kfree_skb_list_reason+0x10/0x10 [ 303.258532][ C1] ? ip6_fragment+0x1c62/0x22c0 [ 303.258559][ C1] ? ip6_fragment+0x1c62/0x22c0 [ 303.258586][ C1] ip6_fragment+0x1c86/0x22c0 [ 303.258621][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.258649][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.258676][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.258701][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.258730][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.258754][ C1] ip6_finish_output+0x2b8/0x840 [ 303.258782][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.258815][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.258847][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.258876][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.258897][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.258928][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.258961][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.258995][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.259038][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.259068][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.259108][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.259135][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.259160][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.259189][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.259219][ C1] ? ip6_fraglist_prepare+0x2a7/0x6c0 [ 303.259244][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.259271][ C1] ? ip6_copy_metadata+0x8a9/0xed0 [ 303.259300][ C1] ip6_fragment+0x1adc/0x22c0 [ 303.259332][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.259358][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.259384][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.259407][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.259433][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.259456][ C1] ip6_finish_output+0x2b8/0x840 [ 303.259482][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.259513][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.259543][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.259569][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.259589][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.259618][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.259648][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.259674][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.259713][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.259741][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.259768][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.259795][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.259820][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.259849][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.259875][ C1] ? ip6_fraglist_prepare+0x2a7/0x6c0 [ 303.259900][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.259927][ C1] ? ip6_copy_metadata+0x8a9/0xed0 [ 303.259955][ C1] ip6_fragment+0x1adc/0x22c0 [ 303.259993][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.260018][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.260044][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.260067][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.260094][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.260117][ C1] ip6_finish_output+0x2b8/0x840 [ 303.260142][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.260173][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.260203][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.260230][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.260249][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.260279][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.260309][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.260334][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.260374][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.260402][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.260429][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.260455][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.260481][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.260509][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.260535][ C1] ? ip6_fraglist_prepare+0x2a7/0x6c0 [ 303.260561][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.260587][ C1] ? ip6_copy_metadata+0x8a9/0xed0 [ 303.260616][ C1] ip6_fragment+0x1adc/0x22c0 [ 303.260648][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.260674][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.260699][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.260723][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.260749][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.260772][ C1] ip6_finish_output+0x2b8/0x840 [ 303.260797][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.260828][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.260858][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.260884][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.260902][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.260930][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.260959][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.260990][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.261029][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.261057][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.261083][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.261110][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.261136][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.261165][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.261192][ C1] ? ip6_fraglist_prepare+0x2a7/0x6c0 [ 303.261217][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.261244][ C1] ? ip6_copy_metadata+0x8a9/0xed0 [ 303.261273][ C1] ip6_fragment+0x1adc/0x22c0 [ 303.261306][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.261332][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.261358][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.261380][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.261407][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.261430][ C1] ip6_finish_output+0x2b8/0x840 [ 303.261455][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.261486][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.261517][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.261543][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.261562][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.261592][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.261622][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.261647][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.261687][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.261715][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.261742][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.261768][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.261794][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.261823][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.261849][ C1] ? ip6_fraglist_prepare+0x2a7/0x6c0 [ 303.261875][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.261901][ C1] ? ip6_copy_metadata+0x8a9/0xed0 [ 303.261930][ C1] ip6_fragment+0x1adc/0x22c0 [ 303.261967][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.261994][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.262019][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.262042][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.262069][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.262091][ C1] ip6_finish_output+0x2b8/0x840 [ 303.262117][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.262148][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.262178][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.262205][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.262224][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.262254][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.262285][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.262310][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.262350][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.262378][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.262404][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.262431][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.262457][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.262486][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.262512][ C1] ? ip6_fraglist_prepare+0x2a7/0x6c0 [ 303.262537][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.262564][ C1] ? ip6_copy_metadata+0x8a9/0xed0 [ 303.262592][ C1] ip6_fragment+0x1adc/0x22c0 [ 303.262624][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.262651][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.262676][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.262699][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.262724][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.262747][ C1] ip6_finish_output+0x2b8/0x840 [ 303.262773][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.262804][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.262834][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.262861][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.262880][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.262909][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.262940][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.262971][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.263011][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.263039][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.263066][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.263092][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.263117][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.263146][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.263172][ C1] ? ip6_fraglist_prepare+0x2a7/0x6c0 [ 303.263198][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.263225][ C1] ? ip6_copy_metadata+0x8a9/0xed0 [ 303.263253][ C1] ip6_fragment+0x1adc/0x22c0 [ 303.263286][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.263312][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.263338][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.263361][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.263387][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.263410][ C1] ip6_finish_output+0x2b8/0x840 [ 303.263436][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.263467][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.263497][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.263524][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.263543][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.263573][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.263603][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.263628][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.263668][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.263696][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.263723][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.263749][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.263774][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.263803][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.263829][ C1] ? ip6_fraglist_prepare+0x2a7/0x6c0 [ 303.263855][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.263882][ C1] ? ip6_copy_metadata+0x8a9/0xed0 [ 303.263909][ C1] ip6_fragment+0x1adc/0x22c0 [ 303.263942][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.263974][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.264000][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.264023][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 303.264050][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.264072][ C1] ip6_finish_output+0x2b8/0x840 [ 303.264098][ C1] ipvlan_queue_xmit+0x8a7/0x1190 [ 303.264128][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 303.264159][ C1] ? netif_skb_features+0x8b6/0xc90 [ 303.264185][ C1] ipvlan_start_xmit+0x4a/0x150 [ 303.264204][ C1] dev_hard_start_xmit+0x27a/0x7d0 [ 303.264234][ C1] __dev_queue_xmit+0x1b73/0x3f50 [ 303.264257][ C1] ? ip6_xmit+0xed8/0x18a0 [ 303.264278][ C1] ? sctp_v6_xmit+0xa60/0x14a0 [ 303.264308][ C1] ? __dev_queue_xmit+0x2f4/0x3f50 [ 303.264334][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.264374][ C1] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 303.264402][ C1] ? ip6_finish_output2+0x107f/0x17b0 [ 303.264429][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.264455][ C1] ip6_finish_output2+0x1284/0x17b0 [ 303.264484][ C1] ? ip6_finish_output2+0x63a/0x17b0 [ 303.264513][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.264544][ C1] ip6_fragment+0x164e/0x22c0 [ 303.264577][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 303.264603][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 303.264629][ C1] ? __pfx_lock_release+0x10/0x10 [ 303.264656][ C1] ? ip6_mtu+0x81/0x3f0 [ 303.264679][ C1] ip6_finish_output+0x2b8/0x840 [ 303.264704][ C1] ip6_xmit+0xed8/0x18a0 [ 303.264733][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 303.264764][ C1] ? sctp_v6_xmit+0x635/0x14a0 [ 303.264789][ C1] sctp_v6_xmit+0xa60/0x14a0 [ 303.264820][ C1] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 303.264845][ C1] ? __skb_checksum+0x8a0/0x9d0 [ 303.264874][ C1] ? sctp_packet_transmit+0x163d/0x2cc0 [ 303.264906][ C1] ? sctp_compute_cksum+0x93/0x110 [ 303.264935][ C1] sctp_packet_transmit+0x26d6/0x2cc0 [ 303.264984][ C1] sctp_packet_singleton+0x22c/0x320 [ 303.265007][ C1] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 303.265032][ C1] ? sctp_outq_select_transport+0x474/0x580 [ 303.265053][ C1] ? sctp_transport_burst_limited+0x18c/0x270 [ 303.265078][ C1] sctp_outq_flush+0x6d5/0x3e20 [ 303.265097][ C1] ? rcu_is_watching+0x15/0xb0 [ 303.265133][ C1] ? __pfx_sctp_outq_flush+0x10/0x10 [ 303.265155][ C1] ? sctp_outq_tail+0x67a/0x930 [ 303.265175][ C1] ? sctp_outq_uncork+0x4f/0xb0 [ 303.265195][ C1] sctp_do_sm+0x59cc/0x60c0 [ 303.265220][ C1] ? kasan_save_track+0x51/0x80 [ 303.265240][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 303.265260][ C1] ? sctp_stream_init_ext+0x56/0x180 [ 303.265285][ C1] ? __pfx_sctp_do_sm+0x10/0x10 [ 303.265321][ C1] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 303.265354][ C1] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 303.265385][ C1] sctp_sendmsg_to_asoc+0xfa5/0x1800 [ 303.265413][ C1] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 303.265440][ C1] ? __asan_memcpy+0x40/0x70 [ 303.265458][ C1] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 303.265492][ C1] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 303.265519][ C1] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 303.265549][ C1] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 303.265577][ C1] ? sctp_sendmsg+0xbb9/0x3520 [ 303.265606][ C1] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 303.265633][ C1] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 303.265664][ C1] sctp_sendmsg+0x1bc3/0x3520 [ 303.265699][ C1] ? __pfx_sctp_sendmsg+0x10/0x10 [ 303.265728][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 303.265759][ C1] ? inet_sendmsg+0x330/0x390 [ 303.265784][ C1] __sock_sendmsg+0x1a6/0x270 [ 303.265815][ C1] ____sys_sendmsg+0x52a/0x7e0 [ 303.265842][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.265863][ C1] ? __fget_files+0x2a/0x410 [ 303.265888][ C1] ? __fget_files+0x2a/0x410 [ 303.265916][ C1] __sys_sendmmsg+0x36a/0x720 [ 303.265946][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 303.265990][ C1] ? futex_hash+0x1e/0x1f0 [ 303.266020][ C1] ? futex_wait+0x285/0x360 [ 303.266043][ C1] ? __pfx_futex_wait+0x10/0x10 [ 303.266072][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 303.266099][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 303.266122][ C1] ? do_futex+0x33b/0x560 [ 303.266150][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 303.266174][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 303.266197][ C1] ? do_syscall_64+0x100/0x230 [ 303.266221][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 303.266246][ C1] do_syscall_64+0xf3/0x230 [ 303.266268][ C1] ? clear_bhb_loop+0x35/0x90 [ 303.266295][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.266319][ C1] RIP: 0033:0x7fa6faf85d29 [ 303.266336][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.266353][ C1] RSP: 002b:00007fa6fbda0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 303.266375][ C1] RAX: ffffffffffffffda RBX: 00007fa6fb175fa0 RCX: 00007fa6faf85d29 [ 303.266389][ C1] RDX: 0000000000000001 RSI: 0000000020003a00 RDI: 0000000000000006 [ 303.266402][ C1] RBP: 00007fa6fb001b08 R08: 0000000000000000 R09: 0000000000000000 [ 303.266414][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.266426][ C1] R13: 0000000000000000 R14: 00007fa6fb175fa0 R15: 00007ffc00836f48 [ 303.266447][ C1] [ 303.266453][ C1] Modules linked in: [ 303.266480][ C1] ---[ end trace 0000000000000000 ]--- [ 303.266494][ C1] RIP: 0010:validate_chain+0x119/0x5920 [ 303.266524][ C1] Code: 25 00 80 04 00 3d 00 00 04 00 0f 85 80 04 00 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 d8 2b 94 be 08 00 00 00 c2 76 8a 00 48 0f a3 1d 7a 70 b0 12 72 66 48 c7 c0 c0 49 3c 9a [ 303.266540][ C1] RSP: 0018:ffffc9000463ffc0 EFLAGS: 00010047 [ 303.266556][ C1] RAX: 0000000000000000 RBX: 0000000000000027 RCX: 1ffff920008c8018 [ 303.266569][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942bd880 [ 303.266582][ C1] RBP: ffffc900046402c0 R08: ffffffff942bd887 R09: 1ffffffff2857b10 [ 303.266596][ C1] R10: dffffc0000000000 R11: fffffbfff2857b11 R12: dffffc0000000000 [ 303.266610][ C1] R13: ffff88807d4e6988 R14: 43e81acb77b0840d R15: 0000000000000000 [ 303.266625][ C1] FS: 00007fa6fbda06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 303.266642][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.266655][ C1] CR2: ffffc9000463ffb8 CR3: 0000000033fa8000 CR4: 00000000003526f0 [ 303.266673][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.266685][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.266704][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 303.267032][ C1] Kernel Offset: disabled