last executing test programs: 3.880192364s ago: executing program 1 (id=531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x100, 0x0, 0x4}}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 3.575605752s ago: executing program 2 (id=533): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_emit_ethernet(0x38, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0xfffffe97) socket(0x840000000002, 0x1, 0x100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x20, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 2.705006222s ago: executing program 0 (id=534): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000002100)=0x7, 0x4) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x7ff, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x10cf, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) 2.691683532s ago: executing program 1 (id=535): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x16, 0x0, 0x1, 0x3, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002700)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x25dfdbfd, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0xffffffff, 0x1010000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x17}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)) r2 = socket(0x22, 0x2, 0x23) close(r2) socket(0x22, 0x2, 0x9) socket(0x23, 0x5, 0x0) write(r2, 0x0, 0x0) 2.402042927s ago: executing program 4 (id=539): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.396604722s ago: executing program 0 (id=540): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x300000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.335244988s ago: executing program 1 (id=541): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e8100a13e7fcca4310085ea82993babea06255779d0dfa66f589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae9dade5d7a11f0f2bbdec62e2df3daf9875c79", 0x6e}, {&(0x7f00000012c0)="f12468c6c394472c8eb4d933949b4e7ce34f7e40ba3f0e7faf4c451550fa3e23ce5eff4f94c1d6a8d70a2bac4a61a80878383b7e9b4949e5e1806334e9b2b38c36b1ae9cacf90d28c44777d394f9c35db1f99c67e2e8be7b18eb08f008d897c6f47e09251280c7f663bd27785705ece8f16d41629358dd8090186bbd46a69fb5727ba3e1d26a5489ee962100f4600a24873520bd6266c7d27e2c0645cdc1c5b6e0787b5a9e9a98358e557344f0d8190df4e39a0ae6a3c77022d5bfe6326c9f151c760d16864288295be04e9f6454cafc19431c2f99322dd409b56268d8e40d80ca98b6f6331f06ef5a28ed1b092e16558d33177d4ab70db6768e06f59cf9c9d0382a2d59fcad38fbeded381b74acb93bd915ae6898f8ba1587e780205ad4cbf31186fe3913dcdb2527af89b3f431029416fcf0aa6a5e81d935d7e37e932a4e8cec21daf2eff568ca97132e6c3e659d0332cbdac7111ac4edbad69c5b67e11ebecc863a58ad7264385e8520d3d3f27fa565bfd90907e66b0a6c692f6fa9b666cb3a1e4c341c7fe0235bbd1bcb657637c2c784c874a7d083f80644b6a6e68983f769e5b90a06b30f0418addd80ed03722a9360bd640acc28f89bef7d20a4b9384ade774b1e461be1a926c9753e561cfd4de1e15177008c1b1e88b267457f697f4ada22ee0198a644a76ab3eecc263e61bc09f1455888f768a15a3213b9981b2863c3505317e4e363a0cbebaad423cae3df0ee901ae7dc4c80ea672932d92cb206e57f931f31482b30caec2926b277f2b45c3f12d6e243ae7a75191480771f6da4798045e9f024cde0045013c6c5dac160a908c1a8f19bfb2a2c49dfd138fcae28f289a929e5c584652a1930930f7b55d010d4ac7f497bcf21484a39b71ce12164d03650f6dcbde8e4315981579d151bedf03769de77d6664c2a3bff1047d19026d747520756eb4f9473f7e174aa0a9e635f0054c9cf2c52f28ef209ee55985c966a89c86cfe4d1c38bb5c367d42590a12ab71fd9df77239b71c29286bce4f5d270c885c223e2541609b5a9b25ca5898e077ffbe051686079c3d371f8bb8decf44234844ce4f3202cf6f7ce760492b2291d465d5a3abbab5486758bd2dd41c3dfff561bff88f105ed23eef411f8815dc739b17329ca264156bdc1112b6a4f3500f5dd79e8608e2b2941d03fac5136874c687bb082a9571002548f4cf6d966267c4e35bde6163d52bba090fdb972bf4905bca4d6032a96166ecd3922b46404c2a96f880c83dad173e119c30e568fa2d1a62c4af40f79cc4db7c41af817a9a41fddab00de688ddde530fbd5d22c30691b1c34394e3d329032a2b31ddbda7f2cbe68b2bb2a5efa0f57fd8dae10f472d8d82a2f2681a68eb54fdc2ff4e532118a8c5bdc490353f65f5747f72edd5dec321bb799f490fa69f4654c1c4d6c4f99e52880f7ec3905e60578649171b0f1e6bf001688a3f1e856b01b19c8e674ee1abecbfc0795927ca1559c557a4febc928f93f10c1e0a793ff140d2475d5563a916101a7a15ca075c1716be9c170b0dd52a8b0f109e722d27057f6cc8474e3f9456d5eeb10b8cfc8668cbab0ce4039211aa349058a38376c63da06616112242b4b3ddfb75cb5d5ca18ad4a231d90cb8ddbe430076c60b57ba814b81a32aa0c16c8867d193f31a89311c6aa4dfdc557657456ba2a6e381a6e824c8f88f599d2e5bbfa4caa45cfcbed998ad6844446270cd1348ac075fd831ff6b6016b82314a82c284ee252e9435ef726c4492f2c80a5f0462496b5f53e6ebd15dc419eab620e2da0534892b0f1506681eedad8c9b65b6f042cb5d71fc39d6f8ac35a054b20f964b6b8867bf242ac1cd2873a6cf8b4d4814ab60f6b3266f72f3c5f10d180cd5a7ae1dccafd847a2cb76542a16da1e88b2df1bef08279d3cf2de21ea2ebc32696c6b3e9df3268d3306c59184edc352eae88bf7967b316d13098312e040265a121762dd83495ba637bf5e68c72a5056231caca9041969d0dfa0f05a0307e42ebc36dc10e526e4e6481509d33ef9eb71565d4c50d3e594f0b451ea22c9ffdc4abb31cb9ad3095f2c1e30abd5072f18f35345a50500084f1bd3f584b0f9a4be66fb8c1193def94882815df069971a2f9088da24932b1b6f22a3afbbbf2408adeadfb4042340f56c3dbb74c8b78dc0efbde2504cf52169c27a4d47969ac0a0cb6875e4e3afaa7e199c5a33e550a9c34f64a6826e2396b88d40cbb8761c04a39bb5be5fd3a1073c3fb77a66d14b0ce83cf66ac2dac9d566a469410cbfdca14764466e2198089ce6f560a323f856867ca06d244f2b6c55259618768ab7e0aa4cd3374105a657f39d11c4eab45f1f685b8f11233b11a2ee4429033937d36b8d3d00a690b57dae50a6760946a1115b43c478950c0edf8d02ee0d07b8b96d00a0c26dcf6a9ccaaa3be39e63b81bdda5d3973f166bd6d414a05e419798810bb23669413c1e9f8285bc5dbe24e5eba2ced316358af4d671419b4a5afdfd2972a983cac53ba75061a2ad6b4c18b6b575660d21ce054f530abe4daf2d86ab3ec0583f8259c2a29e4b98a067398d67e7d26d1f04e7f37446196d6f207b9cbc50eae7bb2bf499e669065d49c44cc3303d25baaff66ba614c2c11c0d668f26a34cc39565f79f5cd844c70e530175b970a92aac892de2cafd5f6463660de32e379bcf2df6da2eb0036fbbb4d3144ac0d943b22b877ad8218056b1064da7c48036dd79502d806865b9d158dd51c78bccceaf8bfe82675c885870d06db67843b2fb24c3fc8a00f7e101774d7c80297c410e7d4af1ed641458b7f69360266d51b16d3c2dbee5f9f1522dceb4575dfc047957f7ead3dc86bf6558cb48869f262d9dc4d646a6d6b844f2c0d1e756688031a31307fdb0a26f3c1b99f3a03487415b0069a1d73f65ea6c89361beddec8addb4bb75714c8885876ac0748a34ba1ef820c83eb98cb12dd6be28086daf767b7a3fcfaadb98101ebbc7c730bfd3278b9e7f072ebfd49c35de14a5a18e6021279a34b9a6b04505554b482ac243ae978157cc3010644eb4d559658aee00e0fe280aa3d621cec79f0463fd5327293516c615515795060b7cf222f968053f7b8438c5f3fe6072985396976d227939b2e43f631cdd98d8b2d45e6adcbaaf1796c53abd8e6d6f47b49782a6d1b312de4a2a11741f3ccc55ef53ec19b555e5d4d87fe37313b65cc5b9619750b158d3e70a29c87ff3eb02b637810dc2c501bd679982d152f743fd6318a6b4e4e51009f5eea457687ea5c80079e73103ea7b8639edb1725a5131b4746abd6a500d7600a2f8e3c0a4474cdc3094a31c994944b89ce60a85f1468f825ba6ce1486760b9f1c87542c1b5a0266d563d4cc72763cdd5adaa9dc5d19da6e8510a6b9162319d65d733b13f004f8a5bc444d3af165720f7bddb50b1a2e3aad47463f035480a9ec84e7d305d1d668e4d04a8a5e5df263f38d0dc15b92585539f0b0fae3bc843594270041ed2b2028ba99d8e7cd8c54f17eea2ee2fb9b0a177033a155b28b0aa2a0f54e07a37da1082a5217224a6da718bece1b7b7ebd81b367ef1e56f16e21cac0f639b2fc3b86718df1d881682dac4e7e61cc26a2854cdee3c29e5df6c6585c1eb432f1070c72b9902d2bc8a62304fc94e1bdf13c2b79568a772f5028869f59d4bc4c44969d7124f49052ba4c8f72ea514628d8a41839b6bb896e6d1f12fed5f94106d86d6fdd93f3fcc9125263a2731a14830f67465c9a8241df9ac88e2c0576d0935ebf8c53a3e7e27b7f5d71b984c8b44a0e08c8bb7a69e234c9c495c1d9fc4435ecad3be25cf439f87405b17c89179c0b535d35a171448cf0693626253323c6a4896fda9987050e9ce6d9085235c3f44827dc21e4c6e8ffaf3e2315a727452d71a04ab7cb2a8bbef876af1805f8b381f376024743d2d6e1f12b8637c0ce41e3d4e190c01526b9636c1089fad636fa3c7a6278e029e6f426456f18d54025883155fb89bf52d5a7a696ecb8d3710763b5897dbe9579e1f144b4ae6f87e617cadf1bdf754b5845bc69db0b69ddec753ebd3c3fc7aa43cdfabe01fa0b0de856d16b7ff14898034c6ce30a6c2fd424ac3d82d3d82b64a3caf70c937df73783bc7908b8ea67d5ec249b0c2910aeb2f9b24f549215b910ce1828429fe5cf5af7ba37c1980aa2500597ab0e9541631dea7a76d25ebbede3cb74b8aaf81cfa8bbd1ba59ef0377eb7481846a861bcdbac62f29e0e6080d679a5080c25b5460cfc123893473f6c27e12a9a732d3cea2f9887b6a312d28cca68f27861d1edfbcb2fb1f28d9b64f957d8b038b3116c4f7988abb45b4fb53073e9154f176a6e4fcd1e206a5e0a7e679da918d480dd0e12eb7dc6bf0fa724418693d6c319590c5977c37621fcb1bd2ceb6fad94441866ff1c169094d5e65a8a8cf70ec024dac0dc699ba8ad7b7860286b4e2bd1cfd34f6a17b75c56b89d8212768566e71f0b310132883033606083eae4ae1e43e822d539a10c34189e3709e515e13c66abca5c41973e1cde6e8ba928a32a45c2b87b0cdc7542455900609a3c22ec16c121196ba46451e3d3bb8dbabc1bbb77bf6181bd4a809cfed730289e578dcb41ca5a26432a4b07b1d9d3216d200d3a2d9cea879502c7c670eafcdd454824e35b847cb7e7017fe172740ad90f7fb8bcc5f6a26a45f3bd47b8c98e88eec22ef959f4c5a37aa265aecbcf7b0fd9151b1d601a5da44137482f43f46ea6325a99826ff1d4200b312892a50bec81576f0951be628201cfab617dbc29a3f037cf743f4274863533fd36dce4e288bac7eb4aa21db83390eb4ac73fc292d9e5eae90885351ff81532684f57dcd4980e891bd1d96b1e9db5f7f9d4b38fa3e8e9de32805e801f989cd134b187140ee7aa067f306e26f8d076c5b62f73b34b9b9acb60c2f6f84070ba6507ea5da926b47051e2d4262883b42b859b88890e21568f65d620cf767ecbf4ffb482044977dfe913063d69ffecc67346e1ed44b9f12e65471640cb5245ef7a7d646dbf80b8ac94e7f7983a7b069312094a1f6a6be9565994ed6374218e91aa77307f7a635e688ec06d79771190ad2760465ec89159cdeb80af9eb0157c4002ea5e336a67e73b9e025a4bb41ce31f110a3ac9a059482ebf1e21c80bca10346ffd9adb236049c518e98f983467f585f284bd75d29130223dfb4bd45fe1351291d0a858f7aa20ad585d88822169b5ecf6282dd61616ec8bbc501fafa8ac74679a0f6fcd5ae58c65a616c9a22df2c427ff9bed4b522bf9e5323493763f3e5bd391433f51c8213ec40bc326beeec8b813c0247cbf36b451b43682d8683b1d378ef53cc823b8bc7e91ea6a4a844f136e91913ea0b0b61ce7aed9de28e769d09ba722b4de2ffa23188cc78dfa40868e1ac0ec56e2b6b308811946d11ad3bf0b9c200eb66dac033e27771115a098db2393004ef507dd7e419386f6d64e38cb416bc", 0xf22}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 2.333935993s ago: executing program 2 (id=542): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.260799354s ago: executing program 3 (id=543): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd6001070000641100fc010000000000000000000000000000ff02000000000000000000000000000100000e22006490"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x3ff, 0x9, 0x9, 0x0, 0x800, 0xffffffffffffff21, 0x0, 0x8001}, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 1.975555467s ago: executing program 3 (id=544): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) 1.955826334s ago: executing program 4 (id=545): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0", 0x58, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1.718140057s ago: executing program 4 (id=546): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 1.691972816s ago: executing program 2 (id=547): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000004000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) socket(0xa, 0x3, 0x3a) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x401, 0xf) 1.387238337s ago: executing program 2 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1181}}, 0x20}}, 0x0) 1.386399141s ago: executing program 0 (id=549): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0xc000) ioctl$int_in(r2, 0x5421, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.384818293s ago: executing program 4 (id=550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r2}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) writev(r3, &(0x7f0000001180)=[{&(0x7f0000001240)="06367d6d", 0x4}], 0x1) 1.239340847s ago: executing program 1 (id=551): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', r0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.171876945s ago: executing program 1 (id=552): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44080) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fc", 0x1) 833.821574ms ago: executing program 0 (id=553): r0 = socket$netlink(0x10, 0x3, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f00000008c0)={0x10, 0x0, 0x1, 0x2bfffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r3, r3, 0xc, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 832.975871ms ago: executing program 4 (id=554): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x16, 0x0, 0x1, 0x3, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002700)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x25dfdbfd, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0xffffffff, 0x1010000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x17}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)) r2 = socket(0x22, 0x2, 0x23) close(r2) socket(0x22, 0x2, 0x9) socket(0x23, 0x5, 0x0) write(r2, 0x0, 0x0) 823.723829ms ago: executing program 3 (id=555): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 584.085706ms ago: executing program 3 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa) socket$alg(0x26, 0x5, 0x0) 582.023822ms ago: executing program 4 (id=557): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) 487.389151ms ago: executing program 1 (id=558): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xdfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) 444.48945ms ago: executing program 0 (id=559): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r3], 0x38}, 0x0) 422.919373ms ago: executing program 2 (id=560): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}, 0x0) 211.547026ms ago: executing program 3 (id=561): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0xfffffffd, 0xb, 0x5}, {0x10000002, 0x0, 0xc, 0x4}], 0x10, 0x20000, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x8, 0x2, 0xfff}]}) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) 210.329091ms ago: executing program 0 (id=562): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000006800010000000000000000000a000000000000001400060000000000000000000000000000000000040004"], 0x30}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x5e3, 0x0, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x8, 0x8, {{0x8, 0x4, 0x1, 0x2d, 0x20, 0x65, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, {[@rr={0x7, 0xb, 0x8e, [@loopback, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r1, 0x0, 0x40) 149.004428ms ago: executing program 3 (id=563): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 0s ago: executing program 2 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 66.785888][ T5821] cgroup: Unknown subsys name 'net' [ 66.899732][ T5821] cgroup: Unknown subsys name 'cpuset' [ 66.908194][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.274270][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.437493][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.443959][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.861434][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.869634][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.879537][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.903781][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.936325][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.944315][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.967118][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.975636][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.981072][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.991023][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.991424][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.998951][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.014051][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.022029][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.023603][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.029759][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.039935][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.044620][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.051077][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.064925][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.076855][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.084483][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.118511][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.126261][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.141415][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.719776][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 72.791132][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 72.947426][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 73.001588][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 73.034603][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 73.125565][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.132894][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.141727][ T5831] bridge_slave_0: entered allmulticast mode [ 73.149326][ T5831] bridge_slave_0: entered promiscuous mode [ 73.157924][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.164995][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.172485][ T5831] bridge_slave_1: entered allmulticast mode [ 73.179542][ T5831] bridge_slave_1: entered promiscuous mode [ 73.187468][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.194548][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.201984][ T5839] bridge_slave_0: entered allmulticast mode [ 73.208934][ T5839] bridge_slave_0: entered promiscuous mode [ 73.274022][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.281830][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.289209][ T5839] bridge_slave_1: entered allmulticast mode [ 73.296193][ T5839] bridge_slave_1: entered promiscuous mode [ 73.314204][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.321381][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.328979][ T5838] bridge_slave_0: entered allmulticast mode [ 73.335916][ T5838] bridge_slave_0: entered promiscuous mode [ 73.381646][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.389087][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.396307][ T5838] bridge_slave_1: entered allmulticast mode [ 73.404223][ T5838] bridge_slave_1: entered promiscuous mode [ 73.414260][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.427300][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.450877][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.495947][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.604046][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.611552][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.618994][ T5835] bridge_slave_0: entered allmulticast mode [ 73.626030][ T5835] bridge_slave_0: entered promiscuous mode [ 73.635511][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.649039][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.661708][ T5831] team0: Port device team_slave_0 added [ 73.673827][ T5839] team0: Port device team_slave_0 added [ 73.683641][ T5839] team0: Port device team_slave_1 added [ 73.689697][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.697256][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.704414][ T5841] bridge_slave_0: entered allmulticast mode [ 73.711579][ T5841] bridge_slave_0: entered promiscuous mode [ 73.719158][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.726308][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.735543][ T5835] bridge_slave_1: entered allmulticast mode [ 73.742675][ T5835] bridge_slave_1: entered promiscuous mode [ 73.763458][ T5831] team0: Port device team_slave_1 added [ 73.781314][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.788784][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.795978][ T5841] bridge_slave_1: entered allmulticast mode [ 73.803253][ T5841] bridge_slave_1: entered promiscuous mode [ 73.888485][ T5838] team0: Port device team_slave_0 added [ 73.897994][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.921121][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.928397][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.954377][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.968448][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.975407][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.001954][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.027166][ T5838] team0: Port device team_slave_1 added [ 74.035646][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.047547][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.057461][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.064404][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.090973][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.102944][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.110406][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.136484][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.147924][ T5840] Bluetooth: hci2: command tx timeout [ 74.153708][ T51] Bluetooth: hci1: command tx timeout [ 74.159145][ T5840] Bluetooth: hci0: command tx timeout [ 74.178876][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.226579][ T51] Bluetooth: hci4: command tx timeout [ 74.226821][ T5840] Bluetooth: hci3: command tx timeout [ 74.274483][ T5835] team0: Port device team_slave_0 added [ 74.295976][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.303440][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.329660][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.344450][ T5841] team0: Port device team_slave_0 added [ 74.354019][ T5841] team0: Port device team_slave_1 added [ 74.375776][ T5835] team0: Port device team_slave_1 added [ 74.404431][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.411763][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.437923][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.490298][ T5831] hsr_slave_0: entered promiscuous mode [ 74.497452][ T5831] hsr_slave_1: entered promiscuous mode [ 74.510091][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.517077][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.543574][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.574583][ T5839] hsr_slave_0: entered promiscuous mode [ 74.581080][ T5839] hsr_slave_1: entered promiscuous mode [ 74.588013][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.595731][ T5839] Cannot create hsr debugfs directory [ 74.616331][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.624032][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.650099][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.661773][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.669045][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.695223][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.772572][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.779590][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.806049][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.846872][ T5838] hsr_slave_0: entered promiscuous mode [ 74.853117][ T5838] hsr_slave_1: entered promiscuous mode [ 74.859418][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.867046][ T5838] Cannot create hsr debugfs directory [ 75.025814][ T5841] hsr_slave_0: entered promiscuous mode [ 75.033589][ T5841] hsr_slave_1: entered promiscuous mode [ 75.043122][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.051145][ T5841] Cannot create hsr debugfs directory [ 75.075210][ T5835] hsr_slave_0: entered promiscuous mode [ 75.081512][ T5835] hsr_slave_1: entered promiscuous mode [ 75.087794][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.095378][ T5835] Cannot create hsr debugfs directory [ 75.451026][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.487887][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.500018][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.530582][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.603357][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.620765][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.639219][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.652494][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.742232][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.769964][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.780830][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.805876][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.874214][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.889303][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.923423][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.969264][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.019442][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.049713][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.082513][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.094318][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.115909][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.171142][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.185192][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.225606][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.233043][ T5840] Bluetooth: hci1: command tx timeout [ 76.235102][ T51] Bluetooth: hci2: command tx timeout [ 76.239318][ T5850] Bluetooth: hci0: command tx timeout [ 76.259431][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.266675][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.288690][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.302070][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.309251][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.317287][ T5850] Bluetooth: hci4: command tx timeout [ 76.324916][ T5850] Bluetooth: hci3: command tx timeout [ 76.349244][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.356339][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.391732][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.398936][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.457834][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.483728][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.495118][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.502288][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.541462][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.548636][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.605097][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.694748][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.702072][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.743595][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.764070][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.780271][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.794871][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.802083][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.851327][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.934530][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.941735][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.001875][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.009510][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.073866][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.169640][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.188833][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.306281][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.362411][ T5831] veth0_vlan: entered promiscuous mode [ 77.404392][ T5831] veth1_vlan: entered promiscuous mode [ 77.554318][ T5831] veth0_macvtap: entered promiscuous mode [ 77.577661][ T5838] veth0_vlan: entered promiscuous mode [ 77.635460][ T5838] veth1_vlan: entered promiscuous mode [ 77.654957][ T5831] veth1_macvtap: entered promiscuous mode [ 77.739529][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.754899][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.781503][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.806236][ T1321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.819839][ T1321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.858667][ T1321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.875039][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.888756][ T1320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.900309][ T5838] veth0_macvtap: entered promiscuous mode [ 77.935748][ T5838] veth1_macvtap: entered promiscuous mode [ 77.995803][ T5839] veth0_vlan: entered promiscuous mode [ 78.013966][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.042984][ T5839] veth1_vlan: entered promiscuous mode [ 78.052323][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.106987][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.132521][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.161405][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.172909][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.191473][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.202830][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.218198][ T5835] veth0_vlan: entered promiscuous mode [ 78.225677][ T5841] veth0_vlan: entered promiscuous mode [ 78.275115][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.281370][ T5841] veth1_vlan: entered promiscuous mode [ 78.289905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.304142][ T5839] veth0_macvtap: entered promiscuous mode [ 78.311081][ T5850] Bluetooth: hci2: command tx timeout [ 78.317595][ T5840] Bluetooth: hci0: command tx timeout [ 78.318007][ T51] Bluetooth: hci1: command tx timeout [ 78.345885][ T5835] veth1_vlan: entered promiscuous mode [ 78.354820][ T5839] veth1_macvtap: entered promiscuous mode [ 78.375119][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.394740][ T5850] Bluetooth: hci3: command tx timeout [ 78.401090][ T51] Bluetooth: hci4: command tx timeout [ 78.410406][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.426271][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.466584][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.549661][ T5841] veth0_macvtap: entered promiscuous mode [ 78.572141][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.598455][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.613426][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.624903][ T5841] veth1_macvtap: entered promiscuous mode [ 78.664983][ T5835] veth0_macvtap: entered promiscuous mode [ 78.691180][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.715988][ T5835] veth1_macvtap: entered promiscuous mode [ 78.741646][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.765828][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.798329][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.860732][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.890436][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.928421][ T5958] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.962839][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.000464][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.065794][ T1325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.085936][ T1325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.126908][ T1320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.167464][ T1320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.205638][ T1325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.274541][ T1325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.300056][ T1325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.330997][ T1325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.453257][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.480078][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.544112][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.585700][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.725697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.757211][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.810832][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.833906][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.104004][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.143665][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.389122][ T5850] Bluetooth: hci2: command tx timeout [ 80.394568][ T5850] Bluetooth: hci1: command tx timeout [ 80.400239][ T51] Bluetooth: hci0: command tx timeout [ 80.410835][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.434286][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.466862][ T5840] Bluetooth: hci3: command tx timeout [ 80.468580][ T5850] Bluetooth: hci4: command tx timeout [ 81.175185][ T5974] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 81.747668][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 81.815977][ T6004] netlink: 180 bytes leftover after parsing attributes in process `syz.3.18'. [ 81.871117][ T6006] netlink: 'syz.3.18': attribute type 21 has an invalid length. [ 81.888888][ T6006] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 82.726755][ T6019] vlan2: entered allmulticast mode [ 82.739128][ T6019] syz_tun: entered allmulticast mode [ 82.870993][ T6010] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 83.141658][ T6025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 83.216218][ T6026] Cannot find del_set index 0 as target [ 83.822609][ T6039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 84.022139][ T6044] bond_slave_0: entered promiscuous mode [ 84.028186][ T6044] bond_slave_1: entered promiscuous mode [ 84.092451][ T6044] macsec1: entered promiscuous mode [ 84.107691][ T6044] bond0: entered promiscuous mode [ 84.187674][ T6044] bond0: left promiscuous mode [ 84.213447][ T6044] bond_slave_0: left promiscuous mode [ 84.219009][ T6044] bond_slave_1: left promiscuous mode [ 84.283237][ T6048] bridge0: port 3(vxlan0) entered blocking state [ 84.309330][ T6053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.31'. [ 84.326752][ T6048] bridge0: port 3(vxlan0) entered disabled state [ 84.337326][ T6048] vxlan0: entered allmulticast mode [ 84.358957][ T6048] vxlan0: entered promiscuous mode [ 86.030668][ T6100] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.388490][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 86.813836][ T10] cfg80211: failed to load regulatory.db [ 86.967698][ T6113] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 87.282717][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.314870][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.361358][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.385662][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.201060][ T6155] bridge_slave_0: left allmulticast mode [ 88.296761][ T6155] bridge_slave_0: left promiscuous mode [ 88.346141][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.382575][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 88.425502][ T6155] bridge_slave_1: left allmulticast mode [ 88.432874][ T6155] bridge_slave_1: left promiscuous mode [ 88.440404][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.460874][ T6155] bond0: (slave bond_slave_0): Releasing backup interface [ 88.507459][ T6155] bond0: (slave bond_slave_1): Releasing backup interface [ 88.679905][ T6155] team0: Port device team_slave_0 removed [ 88.812486][ T6155] team0: Port device team_slave_1 removed [ 88.876240][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.032526][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.190957][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.210365][ T6181] netlink: 'syz.0.68': attribute type 10 has an invalid length. [ 89.252663][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.393750][ T6155] vxlan0: left allmulticast mode [ 89.404538][ T6155] vxlan0: left promiscuous mode [ 89.412556][ T6155] bridge0: port 3(vxlan0) entered disabled state [ 89.464366][ T6155] syz.2.64 (6155) used greatest stack depth: 19992 bytes left [ 89.581252][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.605002][ T6181] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.013019][ T6190] syzkaller0: entered promiscuous mode [ 90.052323][ T6190] syzkaller0: entered allmulticast mode [ 90.238308][ T6201] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 90.318575][ T6201] Cannot find del_set index 0 as target [ 90.696433][ T6217] netlink: 'syz.4.78': attribute type 13 has an invalid length. [ 90.705379][ T6217] netlink: 'syz.4.78': attribute type 17 has an invalid length. [ 92.345922][ T6217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.399939][ T6232] bond0: (slave team0): Releasing backup interface [ 92.499508][ T6232] bridge_slave_0: left allmulticast mode [ 92.505308][ T6232] bridge_slave_0: left promiscuous mode [ 92.525806][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.571126][ T6232] bridge_slave_1: left allmulticast mode [ 92.606673][ T6232] bridge_slave_1: left promiscuous mode [ 92.628921][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.663149][ T6232] bond0: (slave bond_slave_0): Releasing backup interface [ 92.688920][ T6232] bond0: (slave bond_slave_1): Releasing backup interface [ 92.793878][ T6232] team0: Port device team_slave_0 removed [ 92.823226][ T6232] team0: Port device team_slave_1 removed [ 92.858837][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.866822][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.890856][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.908598][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.995439][ T6245] syzkaller0: entered promiscuous mode [ 93.021732][ T6245] syzkaller0: entered allmulticast mode [ 93.068243][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.075960][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.104495][ T6247] bridge0: entered allmulticast mode [ 93.135522][ T6251] bridge_slave_1: left allmulticast mode [ 93.178107][ T6251] bridge_slave_1: left promiscuous mode [ 93.205900][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.237251][ T6251] bridge_slave_0: left allmulticast mode [ 93.243049][ T6251] bridge_slave_0: left promiscuous mode [ 93.254533][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.292654][ T6265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.670781][ T6270] bond0: entered promiscuous mode [ 93.679591][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 93.697921][ T6270] bond_slave_0: entered promiscuous mode [ 93.705092][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 93.743174][ T6270] bond_slave_1: entered promiscuous mode [ 93.769344][ T6270] batadv_slave_0: entered promiscuous mode [ 93.793938][ T6270] hsr1: entered promiscuous mode [ 93.857115][ T6275] ip6gretap0: entered promiscuous mode [ 93.879262][ T6275] syz_tun: entered promiscuous mode [ 93.896265][ T6275] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 93.905309][ T6275] Cannot create hsr debugfs directory [ 94.375781][ T6300] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 94.599007][ T6307] Bluetooth: MGMT ver 1.23 [ 94.793812][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 94.972753][ T6313] netlink: 'syz.3.103': attribute type 6 has an invalid length. [ 94.989937][ T6313] netlink: 'syz.3.103': attribute type 3 has an invalid length. [ 95.012013][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 95.759653][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 95.782308][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 95.808646][ T6334] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 95.821744][ T6334] netlink: 10 bytes leftover after parsing attributes in process `syz.4.109'. [ 95.883580][ T6334] nbd: socks must be embedded in a SOCK_ITEM attr [ 95.913137][ T6334] block nbd0: shutting down sockets [ 96.213620][ T6346] netlink: 'syz.4.114': attribute type 39 has an invalid length. [ 96.283935][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.116'. [ 96.448774][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 96.458840][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 96.469140][ T6351] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 96.516153][ T6350] bridge0: entered promiscuous mode [ 96.527881][ T6350] bridge0: left promiscuous mode [ 96.994102][ T6354] Zero length message leads to an empty skb [ 97.006728][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.037167][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.078890][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.112999][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.770529][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.778398][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.874808][ T6377] netlink: 'syz.0.127': attribute type 4 has an invalid length. [ 97.929962][ T6378] netlink: 'syz.0.127': attribute type 4 has an invalid length. [ 98.031841][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.048191][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.320938][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.561838][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.574400][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.583579][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.014976][ T6398] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 99.374139][ T6402] __nla_validate_parse: 3 callbacks suppressed [ 99.374156][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 99.391056][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 99.909413][ T6414] macsec1: entered promiscuous mode [ 99.917748][ T6414] bridge0: entered promiscuous mode [ 99.930901][ T6414] bridge0: left promiscuous mode [ 100.416120][ T6277] Set syz1 is full, maxelem 65536 reached [ 100.860202][ T6432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'. [ 100.877318][ T6432] netlink: 'syz.3.141': attribute type 7 has an invalid length. [ 100.898649][ T6432] netlink: 'syz.3.141': attribute type 8 has an invalid length. [ 100.918046][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 101.445700][ T6453] netlink: 'syz.2.149': attribute type 3 has an invalid length. [ 101.564058][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.152'. [ 102.929204][ T6485] vlan2: entered promiscuous mode [ 102.936456][ T6485] bridge0: entered promiscuous mode [ 103.965234][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 104.620714][ T6523] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.381351][ T6550] sctp: [Deprecated]: syz.2.181 (pid 6550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.381351][ T6550] Use struct sctp_sack_info instead [ 105.416217][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 105.521330][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 105.570907][ T6554] bridge0: entered promiscuous mode [ 105.603675][ T6554] vlan2: entered promiscuous mode [ 105.665160][ T6560] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 105.751127][ T6557] delete_channel: no stack [ 105.860725][ T6562] bond1: (slave gretap1): making interface the new active one [ 105.900209][ T6562] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 105.975677][ T6560] vlan2: entered allmulticast mode [ 105.980923][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 106.031268][ T6560] bond1: entered allmulticast mode [ 106.038922][ T6560] gretap1: entered allmulticast mode [ 106.045807][ T6560] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 106.083213][ T6578] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 106.439744][ T6582] syzkaller0: entered promiscuous mode [ 106.446128][ T6582] syzkaller0: entered allmulticast mode [ 107.308956][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 108.741248][ T6616] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.034908][ T6630] netlink: 132 bytes leftover after parsing attributes in process `syz.4.207'. [ 109.293104][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 109.302740][ T6640] netlink: 32 bytes leftover after parsing attributes in process `syz.4.210'. [ 109.648153][ T6648] syzkaller0: entered promiscuous mode [ 109.653882][ T6648] syzkaller0: entered allmulticast mode [ 109.674242][ T6650] bridge1: entered allmulticast mode [ 110.506642][ T6671] Bluetooth: MGMT ver 1.23 [ 111.178218][ T6663] warning: `syz.3.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.436655][ T6677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.615608][ T6677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.369049][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 113.013188][ T6677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.050368][ T6698] macvlan2: entered promiscuous mode [ 113.066172][ T6698] macvlan2: entered allmulticast mode [ 113.198573][ T6677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.561865][ T6722] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 114.889465][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.903776][ T6728] tipc: Started in network mode [ 114.913400][ T6728] tipc: Node identity 120acfda14d5, cluster identity 4711 [ 114.921447][ T6728] tipc: Enabled bearer , priority 0 [ 114.939464][ T6731] syzkaller0: entered promiscuous mode [ 114.944957][ T6731] syzkaller0: entered allmulticast mode [ 114.988451][ T6735] tipc: Resetting bearer [ 115.021044][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 115.032140][ T6730] tipc: Resetting bearer [ 115.048759][ T6730] tipc: Disabling bearer [ 115.065114][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.080644][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.100271][ T62] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.408681][ T6756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'. [ 115.442604][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.247'. [ 115.459404][ T6747] tipc: Started in network mode [ 115.469223][ T6747] tipc: Node identity 526d342072e4, cluster identity 4711 [ 115.501489][ T6747] tipc: Enabled bearer , priority 0 [ 115.544257][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 115.574699][ T6752] syzkaller0: entered promiscuous mode [ 115.582299][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 115.595877][ T6752] syzkaller0: entered allmulticast mode [ 115.621193][ T6747] tipc: Resetting bearer [ 115.651258][ T6746] tipc: Resetting bearer [ 115.685914][ T6746] tipc: Disabling bearer [ 115.903867][ T6769] netlink: 92 bytes leftover after parsing attributes in process `syz.3.250'. [ 116.082356][ T6777] netlink: 48 bytes leftover after parsing attributes in process `syz.3.253'. [ 116.438072][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 116.762872][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 116.929145][ T6797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.023340][ T6803] bridge1: entered allmulticast mode [ 117.098824][ T6809] lo speed is unknown, defaulting to 1000 [ 117.125867][ T6809] lo speed is unknown, defaulting to 1000 [ 117.168988][ T6809] lo speed is unknown, defaulting to 1000 [ 117.215914][ T6809] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.295730][ T6809] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.353505][ T6817] bridge1: entered allmulticast mode [ 117.413113][ T6809] lo speed is unknown, defaulting to 1000 [ 117.450153][ T6809] lo speed is unknown, defaulting to 1000 [ 117.461939][ T6809] lo speed is unknown, defaulting to 1000 [ 117.472914][ T6809] lo speed is unknown, defaulting to 1000 [ 117.483745][ T6809] lo speed is unknown, defaulting to 1000 [ 117.557841][ T6831] batadv_slave_1: entered promiscuous mode [ 117.590379][ T5948] IPVS: starting estimator thread 0... [ 117.666902][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 117.696649][ T6832] IPVS: using max 36 ests per chain, 86400 per kthread [ 117.807919][ T6843] netlink: 'syz.2.277': attribute type 1 has an invalid length. [ 117.814026][ T6842] __nla_validate_parse: 3 callbacks suppressed [ 117.814044][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 117.839491][ T6843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.863925][ T6843] bond2: (slave ip6gretap1): making interface the new active one [ 117.872649][ T6843] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 118.276157][ T6856] syzkaller0: entered promiscuous mode [ 118.282919][ T6856] syzkaller0: entered allmulticast mode [ 118.381276][ T6863] netlink: 'syz.3.285': attribute type 6 has an invalid length. [ 118.407281][ T6863] netlink: 'syz.3.285': attribute type 7 has an invalid length. [ 118.415324][ T6863] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.285'. [ 118.623026][ T6871] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 119.107005][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 120.223833][ T6883] tipc: Started in network mode [ 120.235904][ T6883] tipc: Node identity faa9eb355449, cluster identity 4711 [ 120.249477][ T6883] tipc: Enabled bearer , priority 10 [ 120.322280][ T6884] tipc: Resetting bearer [ 120.358470][ T6893] tun0: tun_chr_ioctl cmd 2147767520 [ 120.378825][ T6881] tipc: Resetting bearer [ 120.632522][ T5850] Bluetooth: hci0: command tx timeout [ 121.360515][ T10] tipc: Node number set to 2933975861 [ 121.669837][ T6881] tipc: Disabling bearer [ 121.739671][ T6900] lo speed is unknown, defaulting to 1000 [ 121.861883][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 122.090832][ T6912] syzkaller0: entered promiscuous mode [ 122.109688][ T6912] syzkaller0: entered allmulticast mode [ 122.591447][ T30] audit: type=1800 audit(1750615043.820:2): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.304" name="cgroup.controllers" dev="tmpfs" ino=297 res=0 errno=0 [ 122.904382][ T5842] IPVS: starting estimator thread 0... [ 123.016450][ T6935] IPVS: using max 32 ests per chain, 76800 per kthread [ 123.951469][ T6948] netlink: 27 bytes leftover after parsing attributes in process `syz.0.313'. [ 124.515061][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.2.312'. [ 124.759885][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 124.870786][ T6958] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 124.883840][ T12] bond0: (slave bond_slave_0): interface is now down [ 124.914424][ T12] bond0: (slave bond_slave_1): interface is now down [ 125.008138][ T1320] bond0: (slave bond_slave_0): interface is now down [ 125.014884][ T1320] bond0: (slave bond_slave_1): interface is now down [ 125.030684][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 125.048964][ T6970] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 125.066861][ T1320] bond0: (slave bond_slave_0): interface is now down [ 125.073659][ T1320] bond0: (slave bond_slave_1): interface is now down [ 125.263105][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.275856][ T12] bond0: (slave bond_slave_0): interface is now down [ 125.283459][ T12] bond0: (slave bond_slave_1): interface is now down [ 125.304293][ T6976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.311216][ T12] bond0: (slave bond_slave_0): interface is now down [ 125.319378][ T6976] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 125.336786][ T12] bond0: (slave bond_slave_1): interface is now down [ 125.356852][ T1320] bond0: (slave bond_slave_0): interface is now down [ 125.358404][ T6976] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 125.369856][ T1320] bond0: (slave bond_slave_1): interface is now down [ 125.494072][ T1320] bond0: (slave bond_slave_0): interface is now down [ 125.508072][ T1320] bond0: (slave bond_slave_1): interface is now down [ 125.563619][ T6970] gretap1: entered promiscuous mode [ 125.581824][ T6970] bond1: (slave gretap1): making interface the new active one [ 125.597294][ T6970] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.601777][ T1320] bond0: (slave bond_slave_0): interface is now down [ 125.665788][ T6978] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 126.111951][ T1320] bond0: (slave bond_slave_1): interface is now down [ 126.312975][ T36] bond0: (slave bond_slave_0): interface is now down [ 126.342547][ T36] bond0: (slave bond_slave_1): interface is now down [ 126.367789][ T36] bond0: now running without any active interface! [ 126.536634][ T6982] lo speed is unknown, defaulting to 1000 [ 126.747968][ T7000] syzkaller0: entered promiscuous mode [ 126.753880][ T7000] syzkaller0: entered allmulticast mode [ 129.342367][ T6952] Set syz1 is full, maxelem 65536 reached [ 129.630411][ T7021] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 129.680834][ T7021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.817388][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 130.179990][ T7041] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 130.194265][ T7046] xt_HMARK: spi-set and port-set can't be combined [ 130.458570][ T7057] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 130.579631][ T7057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.598047][ T7063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.605229][ T7063] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.617701][ T7063] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 130.642683][ T7060] dummy0: entered promiscuous mode [ 130.648342][ T7060] macsec1: entered promiscuous mode [ 130.655960][ T7060] dummy0: left promiscuous mode [ 130.684454][ T7067] netlink: 'syz.3.350': attribute type 30 has an invalid length. [ 130.741445][ T7057] veth5: entered promiscuous mode [ 130.771248][ T7057] bond4: (slave veth5): Enslaving as an active interface with a down link [ 130.860661][ T7063] erspan0: entered allmulticast mode [ 130.874025][ T7063] bond4: (slave erspan0): making interface the new active one [ 130.902064][ T7063] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 130.904884][ T7075] xt_cgroup: invalid path, errno=-2 [ 131.127653][ T7080] siw: device registration error -23 [ 131.139058][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 131.158606][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 131.250081][ T7086] netlink: 136 bytes leftover after parsing attributes in process `syz.0.358'. [ 131.723407][ T7109] netlink: 'syz.1.367': attribute type 39 has an invalid length. [ 132.123394][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'. [ 132.538143][ T7128] siw: device registration error -23 [ 132.590649][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 132.649488][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 132.667075][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 132.694118][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 132.728942][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 132.835779][ T7138] lo speed is unknown, defaulting to 1000 [ 132.871699][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878689][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.350132][ T7175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.415538][ T9] IPVS: starting estimator thread 0... [ 135.428121][ T7170] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.440501][ T7168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.456116][ T7178] bridge0: port 1(ipvlan2) entered blocking state [ 135.473794][ T7178] bridge0: port 1(ipvlan2) entered disabled state [ 135.486713][ T7178] ipvlan2: entered allmulticast mode [ 135.504526][ T7178] bridge0: entered allmulticast mode [ 135.517777][ T7178] ipvlan2: left allmulticast mode [ 135.522911][ T7178] bridge0: left allmulticast mode [ 135.536535][ T7180] IPVS: using max 33 ests per chain, 79200 per kthread [ 136.141666][ T7193] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 136.241863][ T7196] syzkaller0: entered promiscuous mode [ 136.259732][ T7196] syzkaller0: entered allmulticast mode [ 137.156627][ T7225] __nla_validate_parse: 1 callbacks suppressed [ 137.156645][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 137.237157][ T7225] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 137.315635][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.400'. [ 137.357566][ T7225] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 138.875762][ T7246] lo speed is unknown, defaulting to 1000 [ 139.068780][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 139.187839][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 139.240909][ T7264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 139.711569][ T7279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.414'. [ 139.740661][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 139.920736][ T7287] netlink: 'syz.3.418': attribute type 11 has an invalid length. [ 140.596695][ T7299] lo speed is unknown, defaulting to 1000 [ 140.653910][ T7315] netlink: 104 bytes leftover after parsing attributes in process `syz.0.427'. [ 140.802271][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 141.867284][ T7328] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 142.087049][ T7332] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 142.197212][ T7321] macsec1: entered allmulticast mode [ 142.202539][ T7321] bond0: entered allmulticast mode [ 142.210556][ T7321] bond0: left allmulticast mode [ 142.445522][ T7334] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 142.507215][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.434'. [ 142.562532][ T7334] dummy0: entered promiscuous mode [ 142.591392][ T7334] bridge0: port 3(dummy0) entered blocking state [ 142.619639][ T7334] bridge0: port 3(dummy0) entered disabled state [ 142.644611][ T7334] dummy0: entered allmulticast mode [ 142.656890][ T7334] bridge0: port 3(dummy0) entered blocking state [ 142.663397][ T7334] bridge0: port 3(dummy0) entered forwarding state [ 142.688253][ T7340] lo speed is unknown, defaulting to 1000 [ 142.912449][ T7354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.011263][ T7350] lo speed is unknown, defaulting to 1000 [ 143.067212][ T7354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.258875][ T7354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.444985][ T7354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.948907][ T1325] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.035210][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.448'. [ 144.263832][ T1325] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.272212][ T1325] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.644355][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.743240][ T7386] lo speed is unknown, defaulting to 1000 [ 144.830416][ T7388] tipc: Enabled bearer , priority 0 [ 144.884570][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 144.989004][ T7389] syzkaller0: entered promiscuous mode [ 144.994744][ T7389] syzkaller0: entered allmulticast mode [ 145.001262][ T7389] tipc: Resetting bearer [ 145.142747][ T7387] tipc: Resetting bearer [ 145.888807][ T43] tipc: Node number set to 545862688 [ 145.930872][ T7410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 146.660697][ T7387] tipc: Disabling bearer [ 146.671622][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 147.280083][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 147.629943][ T7447] IPVS: length: 78 != 8 [ 147.883060][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 148.132143][ T7459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 148.282920][ T7464] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 148.301683][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.327399][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.371864][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.409306][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.435930][ T7466] tipc: Started in network mode [ 148.473923][ T7466] tipc: Node identity aa40fbbd3078, cluster identity 4711 [ 148.509805][ T7466] tipc: Enabled bearer , priority 0 [ 148.521525][ T7466] syzkaller0: entered promiscuous mode [ 148.527321][ T7466] syzkaller0: entered allmulticast mode [ 148.538815][ T7466] tipc: Resetting bearer [ 148.556810][ T7465] tipc: Resetting bearer [ 148.643359][ T7465] tipc: Disabling bearer [ 148.769724][ T7479] dummy0: left allmulticast mode [ 148.780388][ T7479] bridge0: port 3(dummy0) entered disabled state [ 148.854782][ T7479] bridge_slave_0: left allmulticast mode [ 148.909680][ T7479] bridge_slave_0: left promiscuous mode [ 148.960385][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.018307][ T7479] bridge_slave_1: left allmulticast mode [ 149.024224][ T7479] bridge_slave_1: left promiscuous mode [ 149.031007][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.045720][ T7479] bond0: (slave bond_slave_0): Releasing backup interface [ 149.063584][ T7479] bond0: (slave bond_slave_1): Releasing backup interface [ 149.094098][ T7479] team0: Port device team_slave_0 removed [ 149.106939][ T7479] team0: Port device team_slave_1 removed [ 149.124405][ T5972] lo speed is unknown, defaulting to 1000 [ 149.130848][ T7477] lo speed is unknown, defaulting to 1000 [ 149.189626][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'. [ 149.208570][ T7487] team0: Mode changed to "broadcast" [ 149.237457][ T7493] vlan0: entered promiscuous mode [ 149.258495][ T7493] team0: Port device vlan0 added [ 149.303727][ T7503] bridge0: entered allmulticast mode [ 149.328660][ T7503] bridge_slave_1: left allmulticast mode [ 149.340144][ T7503] bridge_slave_1: left promiscuous mode [ 149.355502][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.423392][ T7503] bridge_slave_0: left allmulticast mode [ 149.454285][ T7503] bridge_slave_0: left promiscuous mode [ 149.468041][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.588444][ T7509] smc: net device bond0 applied user defined pnetid SYZ2 [ 149.982388][ T7518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.037312][ T7524] macvtap0: entered promiscuous mode [ 150.042708][ T7524] hsr0: entered promiscuous mode [ 150.048494][ T7524] macvtap0: entered allmulticast mode [ 150.053928][ T7524] hsr0: entered allmulticast mode [ 150.059512][ T7524] hsr_slave_0: entered allmulticast mode [ 150.065205][ T7524] hsr_slave_1: entered allmulticast mode [ 150.086226][ T7524] hsr0: left allmulticast mode [ 150.092355][ T7524] hsr_slave_0: left allmulticast mode [ 150.099867][ T7524] hsr_slave_1: left allmulticast mode [ 150.145214][ T7524] hsr0: left promiscuous mode [ 150.220660][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.230902][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.242669][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.253412][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.264942][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.279896][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.309679][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.328996][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 150.629373][ T7550] tipc: Enabled bearer , priority 0 [ 150.637552][ T7550] syzkaller0: entered promiscuous mode [ 150.644382][ T7550] syzkaller0: entered allmulticast mode [ 150.660821][ T7550] tipc: Resetting bearer [ 150.712783][ T7550] tipc: Disabling bearer [ 150.774108][ T7552] bridge0: entered allmulticast mode [ 150.999492][ T7561] netlink: 'syz.3.504': attribute type 10 has an invalid length. [ 151.070690][ T7561] bridge0: port 1(team0) entered blocking state [ 151.089038][ T7561] bridge0: port 1(team0) entered disabled state [ 151.101589][ T7561] team0: entered allmulticast mode [ 151.115303][ T7561] team_slave_0: entered allmulticast mode [ 151.125925][ T7561] team_slave_1: entered allmulticast mode [ 151.978379][ T7589] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 152.037231][ T7592] lo speed is unknown, defaulting to 1000 [ 152.951172][ T7620] __nla_validate_parse: 70 callbacks suppressed [ 152.951190][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'. [ 152.991195][ T7618] syz.4.524 (7618) used greatest stack depth: 17992 bytes left [ 153.310317][ T7630] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 153.365769][ T7630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.375422][ T7632] sit0: entered promiscuous mode [ 153.389294][ T7632] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 153.397743][ T7632] netlink: 1 bytes leftover after parsing attributes in process `syz.4.530'. [ 153.424450][ T7635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.431842][ T7635] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 153.445277][ T7635] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 153.489069][ T7630] gretap1: entered promiscuous mode [ 153.504397][ T7630] bond1: (slave gretap1): making interface the new active one [ 153.527741][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'. [ 153.546210][ T7630] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 153.604217][ T7639] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 154.641014][ T9] IPVS: starting estimator thread 0... [ 154.642314][ T7646] delete_channel: no stack [ 154.691694][ T978] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 154.706449][ T5850] Bluetooth: hci2: command 0x0405 tx timeout [ 154.737471][ T7653] IPVS: using max 27 ests per chain, 64800 per kthread [ 154.777019][ T978] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 155.400016][ T7682] lo speed is unknown, defaulting to 1000 [ 156.477564][ T7704] delete_channel: no stack [ 156.505170][ T7707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 156.698498][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 156.741081][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 156.848967][ T7716] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.558'. [ 157.142868][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 157.242239][ T7734] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 157.282185][ T7734] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.338419][ T7732] bridge0: entered promiscuous mode [ 157.343953][ T7732] team0: entered promiscuous mode [ 157.349065][ T7732] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 157.358385][ T7732] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7732, name: syz.3.563 [ 157.367359][ T7732] preempt_count: 201, expected: 0 [ 157.372384][ T7732] RCU nest depth: 0, expected: 0 [ 157.377382][ T7732] 3 locks held by syz.3.563/7732: [ 157.382409][ T7732] #0: ffffffff8fa15db8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 157.392006][ T7732] #1: ffffffff8f512b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 157.401227][ T7732] #2: ffff8880227d8368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 157.411497][ T7732] Preemption disabled at: [ 157.411509][ T7732] [] dev_uc_add+0x56/0x120 [ 157.421896][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.3.563 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 157.421920][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.421937][ T7732] Call Trace: [ 157.421947][ T7732] [ 157.421955][ T7732] dump_stack_lvl+0x189/0x250 [ 157.421993][ T7732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.422019][ T7732] ? __pfx__printk+0x10/0x10 [ 157.422042][ T7732] ? print_lock_name+0xde/0x100 [ 157.422059][ T7732] ? dev_uc_add+0x56/0x120 [ 157.422087][ T7732] __might_resched+0x495/0x610 [ 157.422118][ T7732] ? dev_uc_add+0x56/0x120 [ 157.422140][ T7732] ? __pfx___might_resched+0x10/0x10 [ 157.422164][ T7732] ? __pfx___irq_work_queue_local+0x10/0x10 [ 157.422186][ T7732] ? console_unlock+0x21b/0x270 [ 157.422217][ T7732] __mutex_lock+0x106/0xe80 [ 157.422241][ T7732] ? __pfx__printk+0x10/0x10 [ 157.422261][ T7732] ? stack_depot_save_flags+0x40/0x900 [ 157.422282][ T7732] ? team_change_rx_flags+0x38/0x220 [ 157.422300][ T7732] ? __netdev_printk+0x365/0x4d0 [ 157.422320][ T7732] ? __pfx___mutex_lock+0x10/0x10 [ 157.422340][ T7732] ? netdev_info+0x10a/0x160 [ 157.422366][ T7732] ? __pfx_netdev_info+0x10/0x10 [ 157.422384][ T7732] ? _printk+0xcf/0x120 [ 157.422402][ T7732] ? __sock_sendmsg+0x21c/0x270 [ 157.422427][ T7732] team_change_rx_flags+0x38/0x220 [ 157.422450][ T7732] ? __pfx_team_change_rx_flags+0x10/0x10 [ 157.422467][ T7732] __dev_set_promiscuity+0x531/0x740 [ 157.422493][ T7732] ? netdev_info+0x10a/0x160 [ 157.422514][ T7732] netif_set_promiscuity+0x50/0xe0 [ 157.422539][ T7732] dev_set_promiscuity+0x126/0x260 [ 157.422566][ T7732] br_manage_promisc+0x180/0x560 [ 157.422594][ T7732] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 157.422617][ T7732] __dev_set_promiscuity+0x531/0x740 [ 157.422644][ T7732] ? __hw_addr_add_ex+0x3c5/0x770 [ 157.422670][ T7732] __dev_set_rx_mode+0x17c/0x260 [ 157.422694][ T7732] dev_uc_add+0xc8/0x120 [ 157.422717][ T7732] macsec_dev_open+0xd9/0x530 [ 157.422733][ T7732] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 157.422751][ T7732] ? __pfx_macsec_dev_open+0x10/0x10 [ 157.422765][ T7732] ? ib_device_get_by_netdev+0x84/0x4d0 [ 157.422778][ T7732] ? hsr_netdev_notify+0x29e/0xcf0 [ 157.422799][ T7732] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 157.422818][ T7732] ? udp_tunnel_nic_netdevice_event+0x1a7/0x19f0 [ 157.422847][ T7732] ? ip6_route_dev_notify+0x9a/0x5b0 [ 157.422870][ T7732] ? notifier_call_chain+0x3bf/0x3e0 [ 157.422902][ T7732] __dev_open+0x46d/0x880 [ 157.422929][ T7732] ? __pfx___dev_open+0x10/0x10 [ 157.422950][ T7732] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 157.422975][ T7732] __dev_change_flags+0x1ea/0x6d0 [ 157.423008][ T7732] ? validate_linkmsg+0x765/0x950 [ 157.423028][ T7732] ? __pfx___dev_change_flags+0x10/0x10 [ 157.423063][ T7732] rtnl_newlink_create+0x555/0xb00 [ 157.423101][ T7732] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 157.423121][ T7732] ? rtnl_newlink+0x8db/0x1c70 [ 157.423144][ T7732] ? __pfx___mutex_lock+0x10/0x10 [ 157.423173][ T7732] ? ns_capable+0x8a/0xf0 [ 157.423199][ T7732] rtnl_newlink+0x16d6/0x1c70 [ 157.423234][ T7732] ? __pfx_rtnl_newlink+0x10/0x10 [ 157.423255][ T7732] ? kvm_sched_clock_read+0x11/0x20 [ 157.423268][ T7732] ? sched_clock+0x3f/0x60 [ 157.423290][ T7732] ? __lock_acquire+0xab9/0xd20 [ 157.423325][ T7732] ? __lock_acquire+0xab9/0xd20 [ 157.423369][ T7732] ? is_bpf_text_address+0x26/0x2b0 [ 157.423397][ T7732] ? is_bpf_text_address+0x292/0x2b0 [ 157.423420][ T7732] ? is_bpf_text_address+0x26/0x2b0 [ 157.423446][ T7732] ? kernel_text_address+0xa5/0xe0 [ 157.423480][ T7732] ? __lock_acquire+0xab9/0xd20 [ 157.423528][ T7732] ? __pfx_rtnl_newlink+0x10/0x10 [ 157.423548][ T7732] rtnetlink_rcv_msg+0x7cf/0xb70 [ 157.423573][ T7732] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 157.423593][ T7732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.423633][ T7732] netlink_rcv_skb+0x205/0x470 [ 157.423656][ T7732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.423679][ T7732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.423715][ T7732] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.423735][ T7732] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.423762][ T7732] netlink_unicast+0x758/0x8d0 [ 157.423795][ T7732] netlink_sendmsg+0x805/0xb30 [ 157.423826][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.423851][ T7732] ? aa_sock_msg_perm+0x94/0x160 [ 157.423875][ T7732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.423895][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.423918][ T7732] __sock_sendmsg+0x21c/0x270 [ 157.423940][ T7732] ____sys_sendmsg+0x505/0x830 [ 157.423969][ T7732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.424008][ T7732] ? import_iovec+0x74/0xa0 [ 157.424031][ T7732] ___sys_sendmsg+0x21f/0x2a0 [ 157.424058][ T7732] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.424122][ T7732] ? __fget_files+0x2a/0x420 [ 157.424139][ T7732] ? __fget_files+0x3a0/0x420 [ 157.424169][ T7732] __x64_sys_sendmsg+0x19b/0x260 [ 157.424196][ T7732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.424231][ T7732] ? rcu_is_watching+0x15/0xb0 [ 157.424262][ T7732] ? do_syscall_64+0xbe/0x3b0 [ 157.424284][ T7732] do_syscall_64+0xfa/0x3b0 [ 157.424301][ T7732] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.424318][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.424335][ T7732] ? clear_bhb_loop+0x60/0xb0 [ 157.424357][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.424373][ T7732] RIP: 0033:0x7f1fcff8e929 [ 157.424397][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.424412][ T7732] RSP: 002b:00007f1fd0d7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.424431][ T7732] RAX: ffffffffffffffda RBX: 00007f1fd01b5fa0 RCX: 00007f1fcff8e929 [ 157.424443][ T7732] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 157.424453][ T7732] RBP: 00007f1fd0010b39 R08: 0000000000000000 R09: 0000000000000000 [ 157.424463][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.424473][ T7732] R13: 0000000000000000 R14: 00007f1fd01b5fa0 R15: 00007fffcec7b958 [ 157.424502][ T7732] [ 157.424519][ T7732] [ 158.006731][ T7732] ============================= [ 158.011560][ T7732] [ BUG: Invalid wait context ] [ 158.016397][ T7732] 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 Tainted: G W [ 158.025041][ T7732] ----------------------------- [ 158.029865][ T7732] syz.3.563/7732 is trying to lock: [ 158.035048][ T7732] ffff888030978e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 158.045129][ T7732] other info that might help us debug this: [ 158.050993][ T7732] context-{5:5} [ 158.054447][ T7732] 3 locks held by syz.3.563/7732: [ 158.059449][ T7732] #0: ffffffff8fa15db8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 158.068927][ T7732] #1: ffffffff8f512b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 158.077959][ T7732] #2: ffff8880227d8368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 158.088137][ T7732] stack backtrace: [ 158.091845][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.3.563 Tainted: G W 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 158.091865][ T7732] Tainted: [W]=WARN [ 158.091870][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.091878][ T7732] Call Trace: [ 158.091883][ T7732] [ 158.091889][ T7732] dump_stack_lvl+0x189/0x250 [ 158.091913][ T7732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.091931][ T7732] ? __pfx__printk+0x10/0x10 [ 158.091946][ T7732] ? print_lock_name+0xde/0x100 [ 158.091960][ T7732] __lock_acquire+0xbcb/0xd20 [ 158.091980][ T7732] ? team_change_rx_flags+0x38/0x220 [ 158.091993][ T7732] lock_acquire+0x120/0x360 [ 158.092008][ T7732] ? team_change_rx_flags+0x38/0x220 [ 158.092025][ T7732] __mutex_lock+0x182/0xe80 [ 158.092038][ T7732] ? team_change_rx_flags+0x38/0x220 [ 158.092051][ T7732] ? __pfx__printk+0x10/0x10 [ 158.092064][ T7732] ? stack_depot_save_flags+0x40/0x900 [ 158.092079][ T7732] ? team_change_rx_flags+0x38/0x220 [ 158.092091][ T7732] ? __netdev_printk+0x365/0x4d0 [ 158.092104][ T7732] ? __pfx___mutex_lock+0x10/0x10 [ 158.092117][ T7732] ? netdev_info+0x10a/0x160 [ 158.092133][ T7732] ? __pfx_netdev_info+0x10/0x10 [ 158.092147][ T7732] ? _printk+0xcf/0x120 [ 158.092158][ T7732] ? __sock_sendmsg+0x21c/0x270 [ 158.092174][ T7732] team_change_rx_flags+0x38/0x220 [ 158.092188][ T7732] ? __pfx_team_change_rx_flags+0x10/0x10 [ 158.092200][ T7732] __dev_set_promiscuity+0x531/0x740 [ 158.092218][ T7732] ? netdev_info+0x10a/0x160 [ 158.092232][ T7732] netif_set_promiscuity+0x50/0xe0 [ 158.092250][ T7732] dev_set_promiscuity+0x126/0x260 [ 158.092268][ T7732] br_manage_promisc+0x180/0x560 [ 158.092285][ T7732] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 158.092302][ T7732] __dev_set_promiscuity+0x531/0x740 [ 158.092319][ T7732] ? __hw_addr_add_ex+0x3c5/0x770 [ 158.092337][ T7732] __dev_set_rx_mode+0x17c/0x260 [ 158.092354][ T7732] dev_uc_add+0xc8/0x120 [ 158.092372][ T7732] macsec_dev_open+0xd9/0x530 [ 158.092384][ T7732] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 158.092397][ T7732] ? __pfx_macsec_dev_open+0x10/0x10 [ 158.092408][ T7732] ? ib_device_get_by_netdev+0x84/0x4d0 [ 158.092419][ T7732] ? hsr_netdev_notify+0x29e/0xcf0 [ 158.092435][ T7732] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 158.092448][ T7732] ? udp_tunnel_nic_netdevice_event+0x1a7/0x19f0 [ 158.092465][ T7732] ? ip6_route_dev_notify+0x9a/0x5b0 [ 158.092482][ T7732] ? notifier_call_chain+0x3bf/0x3e0 [ 158.092503][ T7732] __dev_open+0x46d/0x880 [ 158.092520][ T7732] ? __pfx___dev_open+0x10/0x10 [ 158.092534][ T7732] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 158.092548][ T7732] __dev_change_flags+0x1ea/0x6d0 [ 158.092565][ T7732] ? validate_linkmsg+0x765/0x950 [ 158.092579][ T7732] ? __pfx___dev_change_flags+0x10/0x10 [ 158.092599][ T7732] rtnl_newlink_create+0x555/0xb00 [ 158.092620][ T7732] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 158.092636][ T7732] ? rtnl_newlink+0x8db/0x1c70 [ 158.092656][ T7732] ? __pfx___mutex_lock+0x10/0x10 [ 158.092672][ T7732] ? ns_capable+0x8a/0xf0 [ 158.092691][ T7732] rtnl_newlink+0x16d6/0x1c70 [ 158.092711][ T7732] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.092725][ T7732] ? kvm_sched_clock_read+0x11/0x20 [ 158.092736][ T7732] ? sched_clock+0x3f/0x60 [ 158.092752][ T7732] ? __lock_acquire+0xab9/0xd20 [ 158.092778][ T7732] ? __lock_acquire+0xab9/0xd20 [ 158.092800][ T7732] ? is_bpf_text_address+0x26/0x2b0 [ 158.092819][ T7732] ? is_bpf_text_address+0x292/0x2b0 [ 158.092836][ T7732] ? is_bpf_text_address+0x26/0x2b0 [ 158.092854][ T7732] ? kernel_text_address+0xa5/0xe0 [ 158.092873][ T7732] ? __lock_acquire+0xab9/0xd20 [ 158.092897][ T7732] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.092913][ T7732] rtnetlink_rcv_msg+0x7cf/0xb70 [ 158.092929][ T7732] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 158.092943][ T7732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.092963][ T7732] netlink_rcv_skb+0x205/0x470 [ 158.092979][ T7732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.092994][ T7732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.093013][ T7732] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.093027][ T7732] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.093044][ T7732] netlink_unicast+0x758/0x8d0 [ 158.093061][ T7732] netlink_sendmsg+0x805/0xb30 [ 158.093079][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.093095][ T7732] ? aa_sock_msg_perm+0x94/0x160 [ 158.093112][ T7732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.093127][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.093142][ T7732] __sock_sendmsg+0x21c/0x270 [ 158.093156][ T7732] ____sys_sendmsg+0x505/0x830 [ 158.093176][ T7732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.093196][ T7732] ? import_iovec+0x74/0xa0 [ 158.093209][ T7732] ___sys_sendmsg+0x21f/0x2a0 [ 158.093227][ T7732] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.093256][ T7732] ? __fget_files+0x2a/0x420 [ 158.093270][ T7732] ? __fget_files+0x3a0/0x420 [ 158.093286][ T7732] __x64_sys_sendmsg+0x19b/0x260 [ 158.093305][ T7732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.093325][ T7732] ? rcu_is_watching+0x15/0xb0 [ 158.093345][ T7732] ? do_syscall_64+0xbe/0x3b0 [ 158.093359][ T7732] do_syscall_64+0xfa/0x3b0 [ 158.093371][ T7732] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.093383][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.093396][ T7732] ? clear_bhb_loop+0x60/0xb0 [ 158.093409][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.093422][ T7732] RIP: 0033:0x7f1fcff8e929 [ 158.093434][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.093445][ T7732] RSP: 002b:00007f1fd0d7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.093459][ T7732] RAX: ffffffffffffffda RBX: 00007f1fd01b5fa0 RCX: 00007f1fcff8e929 [ 158.093468][ T7732] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 158.093477][ T7732] RBP: 00007f1fd0010b39 R08: 0000000000000000 R09: 0000000000000000 [ 158.093485][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.093492][ T7732] R13: 0000000000000000 R14: 00007f1fd01b5fa0 R15: 00007fffcec7b958 [ 158.093507][ T7732] [ 158.674262][ T7732] team_slave_0: entered promiscuous mode [ 158.680076][ T7732] team_slave_1: entered promiscuous mode [ 158.705796][ T7732] macsec0: entered allmulticast mode [ 158.713815][ T7732] bridge0: entered allmulticast mode [ 158.720558][ T7732] bridge0: left allmulticast mode [ 158.725635][ T7732] bridge0: left promiscuous mode [ 158.730637][ T7732] team0: left promiscuous mode [ 158.735389][ T7732] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 158.744677][ T7732] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7732, name: syz.3.563 [ 158.753662][ T7732] preempt_count: 201, expected: 0 [ 158.758711][ T7732] RCU nest depth: 0, expected: 0 [ 158.763649][ T7732] INFO: lockdep is turned off. [ 158.768420][ T7732] Preemption disabled at: [ 158.768431][ T7732] [] dev_uc_del+0x56/0x110 [ 158.778741][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.3.563 Tainted: G W 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 158.778759][ T7732] Tainted: [W]=WARN [ 158.778763][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.778769][ T7732] Call Trace: [ 158.778774][ T7732] [ 158.778779][ T7732] dump_stack_lvl+0x189/0x250 [ 158.778799][ T7732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.778814][ T7732] ? __pfx__printk+0x10/0x10 [ 158.778834][ T7732] ? irq_work_queue+0xbc/0x140 [ 158.778847][ T7732] ? dev_uc_del+0x56/0x110 [ 158.778863][ T7732] __might_resched+0x495/0x610 [ 158.778878][ T7732] ? dev_uc_del+0x56/0x110 [ 158.778890][ T7732] ? __pfx___might_resched+0x10/0x10 [ 158.778903][ T7732] ? kasan_save_track+0x4f/0x80 [ 158.778917][ T7732] ? __kasan_kmalloc+0x93/0xb0 [ 158.778924][ T7732] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 158.778933][ T7732] ? __hw_addr_add_ex+0x1f4/0x770 [ 158.778946][ T7732] ? br_fdb_sync_static+0x1bf/0x3f0 [ 158.778956][ T7732] ? br_manage_promisc+0x38a/0x560 [ 158.778965][ T7732] ? __dev_set_promiscuity+0x531/0x740 [ 158.778980][ T7732] __mutex_lock+0x106/0xe80 [ 158.778991][ T7732] ? __pfx__printk+0x10/0x10 [ 158.779001][ T7732] ? team_change_rx_flags+0x38/0x220 [ 158.779010][ T7732] ? __netdev_printk+0x365/0x4d0 [ 158.779020][ T7732] ? __pfx___mutex_lock+0x10/0x10 [ 158.779029][ T7732] ? netdev_info+0x10a/0x160 [ 158.779041][ T7732] ? __pfx_netdev_info+0x10/0x10 [ 158.779054][ T7732] team_change_rx_flags+0x38/0x220 [ 158.779064][ T7732] ? __pfx_team_change_rx_flags+0x10/0x10 [ 158.779073][ T7732] __dev_set_promiscuity+0x531/0x740 [ 158.779086][ T7732] ? lock_release+0x4b/0x3e0 [ 158.779099][ T7732] netif_set_promiscuity+0x50/0xe0 [ 158.779112][ T7732] dev_set_promiscuity+0x126/0x260 [ 158.779125][ T7732] br_manage_promisc+0x4db/0x560 [ 158.779137][ T7732] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 158.779151][ T7732] __dev_set_promiscuity+0x531/0x740 [ 158.779164][ T7732] __dev_set_rx_mode+0x17c/0x260 [ 158.779178][ T7732] dev_uc_del+0xc0/0x110 [ 158.779191][ T7732] macsec_dev_stop+0x2b6/0x380 [ 158.779200][ T7732] ? __pfx_macsec_dev_stop+0x10/0x10 [ 158.779208][ T7732] ? dev_deactivate_many+0xb82/0xd40 [ 158.779222][ T7732] ? __local_bh_enable_ip+0x12d/0x1c0 [ 158.779235][ T7732] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 158.779249][ T7732] ? do_raw_spin_unlock+0x122/0x240 [ 158.779260][ T7732] ? dev_deactivate_many+0xb82/0xd40 [ 158.779271][ T7732] ? dev_deactivate_many+0xd03/0xd40 [ 158.779284][ T7732] ? dev_deactivate_many+0x258/0xd40 [ 158.779295][ T7732] ? __pfx_macsec_dev_stop+0x10/0x10 [ 158.779303][ T7732] __dev_close_many+0x361/0x6f0 [ 158.779316][ T7732] ? __pfx___dev_close_many+0x10/0x10 [ 158.779327][ T7732] ? stack_depot_save_flags+0x40/0x900 [ 158.779339][ T7732] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.779350][ T7732] dev_close_many+0x225/0x410 [ 158.779360][ T7732] ? kasan_save_track+0x4f/0x80 [ 158.779373][ T7732] ? kasan_save_track+0x3e/0x80 [ 158.779385][ T7732] ? __kasan_slab_free+0x62/0x70 [ 158.779393][ T7732] ? __pfx_dev_close_many+0x10/0x10 [ 158.779403][ T7732] ? netlink_sendmsg+0x805/0xb30 [ 158.779414][ T7732] ? __sock_sendmsg+0x21c/0x270 [ 158.779424][ T7732] ? ____sys_sendmsg+0x505/0x830 [ 158.779436][ T7732] ? ___sys_sendmsg+0x21f/0x2a0 [ 158.779448][ T7732] ? __x64_sys_sendmsg+0x19b/0x260 [ 158.779460][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.779471][ T7732] unregister_netdevice_many_notify+0x834/0x2320 [ 158.779484][ T7732] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 158.779496][ T7732] ? rcu_is_watching+0x15/0xb0 [ 158.779512][ T7732] ? rtnl_newlink_create+0x7fa/0xb00 [ 158.779524][ T7732] ? kfree+0x18e/0x440 [ 158.779542][ T7732] rtnl_newlink_create+0x802/0xb00 [ 158.779568][ T7732] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 158.779589][ T7732] ? rtnl_newlink+0x8db/0x1c70 [ 158.779607][ T7732] ? __pfx___mutex_lock+0x10/0x10 [ 158.779618][ T7732] ? ns_capable+0x8a/0xf0 [ 158.779633][ T7732] rtnl_newlink+0x16d6/0x1c70 [ 158.779653][ T7732] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.779673][ T7732] ? kvm_sched_clock_read+0x11/0x20 [ 158.779687][ T7732] ? sched_clock+0x3f/0x60 [ 158.779706][ T7732] ? __lock_acquire+0xab9/0xd20 [ 158.779733][ T7732] ? __lock_acquire+0xab9/0xd20 [ 158.779751][ T7732] ? is_bpf_text_address+0x26/0x2b0 [ 158.779765][ T7732] ? is_bpf_text_address+0x292/0x2b0 [ 158.779778][ T7732] ? is_bpf_text_address+0x26/0x2b0 [ 158.779792][ T7732] ? kernel_text_address+0xa5/0xe0 [ 158.779808][ T7732] ? __lock_acquire+0xab9/0xd20 [ 158.779843][ T7732] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.779861][ T7732] rtnetlink_rcv_msg+0x7cf/0xb70 [ 158.779883][ T7732] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 158.779899][ T7732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.779913][ T7732] netlink_rcv_skb+0x205/0x470 [ 158.779925][ T7732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.779936][ T7732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.779950][ T7732] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.779961][ T7732] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.779973][ T7732] netlink_unicast+0x758/0x8d0 [ 158.779994][ T7732] netlink_sendmsg+0x805/0xb30 [ 158.780017][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.780039][ T7732] ? aa_sock_msg_perm+0x94/0x160 [ 158.780060][ T7732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.780079][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.780091][ T7732] __sock_sendmsg+0x21c/0x270 [ 158.780102][ T7732] ____sys_sendmsg+0x505/0x830 [ 158.780116][ T7732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.780131][ T7732] ? import_iovec+0x74/0xa0 [ 158.780141][ T7732] ___sys_sendmsg+0x21f/0x2a0 [ 158.780154][ T7732] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.780175][ T7732] ? __fget_files+0x2a/0x420 [ 158.780185][ T7732] ? __fget_files+0x3a0/0x420 [ 158.780196][ T7732] __x64_sys_sendmsg+0x19b/0x260 [ 158.780210][ T7732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.780225][ T7732] ? rcu_is_watching+0x15/0xb0 [ 158.780240][ T7732] ? do_syscall_64+0xbe/0x3b0 [ 158.780250][ T7732] do_syscall_64+0xfa/0x3b0 [ 158.780259][ T7732] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.780268][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.780276][ T7732] ? clear_bhb_loop+0x60/0xb0 [ 158.780286][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.780295][ T7732] RIP: 0033:0x7f1fcff8e929 [ 158.780305][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.780313][ T7732] RSP: 002b:00007f1fd0d7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.780324][ T7732] RAX: ffffffffffffffda RBX: 00007f1fd01b5fa0 RCX: 00007f1fcff8e929 [ 158.780331][ T7732] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 158.780337][ T7732] RBP: 00007f1fd0010b39 R08: 0000000000000000 R09: 0000000000000000 [ 158.780342][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.780348][ T7732] R13: 0000000000000000 R14: 00007f1fd01b5fa0 R15: 00007fffcec7b958 [ 158.780357][ T7732] [ 158.780365][ T7732] team_slave_0: left promiscuous mode [ 159.454495][ T7732] team_slave_1: left promiscuous mode [ 159.473496][ T7734] vlan3: entered promiscuous mode [ 159.478705][ T7734] bond5: entered promiscuous mode [ 159.483894][ T7734] vlan3: entered allmulticast mode [ 159.489042][ T7734] bond5: entered allmulticast mode [ 159.569603][ T7748] 8021q: adding VLAN 0 to HW filter on device bond2