last executing test programs: 4.035092354s ago: executing program 0 (id=102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x108, 0xbe3, 0x5, 0x10090, 0x1, 0xfb8, '\x00', 0x0, r2, 0x2, 0x4, 0x1, 0x0, @void, @value, @value=r3}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1, 0x3, 0x3, 0x8, 0xb6, 0x1, 0x8}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.74430019s ago: executing program 3 (id=106): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0xfe800000, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) sendmsg$inet6(r0, 0x0, 0x20008000) 3.524462509s ago: executing program 3 (id=109): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000019000000", @ANYRES32=r4, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c000280050001000400"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) sendmsg$OSF_MSG_ADD(r6, 0x0, 0x41) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x21000000}, 0x0) 3.405269852s ago: executing program 1 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001f0a05010000000000000000070000000900020073797a31000000000900010073797a30000000003c0003"], 0xec}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x103, 0x0, 0xffffffffffffffff, 0x8, '\x00', r10, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r12}, 0x18) close(0x3) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x1e0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xfff8, 0x10}, {0x10, 0xd}}, [@TCA_STAB={0x1bc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x5, 0x6, 0x2, 0x1, 0x4, 0xd, 0x3}}, {0xa, 0x2, [0x15b, 0x6, 0x9]}}, {{0x1c, 0x1, {0xd, 0x1, 0x9, 0x5, 0x1, 0x6, 0xc2, 0x9}}, {0x16, 0x2, [0x2, 0x0, 0x9, 0x8, 0x8000, 0x2, 0x0, 0x9, 0x100]}}, {{0x1c, 0x1, {0x9, 0xe7, 0x9, 0x5, 0x0, 0x7ff, 0x7ffd, 0x3}}, {0xa, 0x2, [0x0, 0x8f78, 0x7f]}}, {{0x1c, 0x1, {0x13, 0x7, 0x91, 0x3, 0x1, 0xc, 0xa9, 0x7}}, {0x12, 0x2, [0x5, 0x9, 0x2, 0x8e, 0x4, 0x6, 0x8]}}, {{0x1c, 0x1, {0x4, 0x1, 0x2, 0x3, 0x1, 0x7, 0x5, 0x6}}, {0x10, 0x2, [0x3ff, 0x5, 0x401, 0x5, 0x8, 0xa]}}, {{0x1c, 0x1, {0x5, 0x2, 0xf3e, 0x7, 0x0, 0x3, 0x50a8d256, 0x7}}, {0x12, 0x2, [0xf86, 0xfffc, 0xfff, 0x2d, 0x8, 0x7ff, 0x400]}}, {{0x1c, 0x1, {0xff, 0x8, 0x1ff, 0x100000, 0x0, 0x2, 0x7, 0x7}}, {0x12, 0x2, [0x9, 0x0, 0x1, 0x32, 0x1, 0x2, 0x7]}}, {{0x1c, 0x1, {0x2, 0x5, 0x7, 0x1800, 0x2, 0x8, 0x2, 0x1}}, {0x6, 0x2, [0xbbab]}}, {{0x1c, 0x1, {0x0, 0x0, 0x400, 0x7f, 0x2, 0x292, 0x101, 0x3}}, {0xa, 0x2, [0x9, 0x8, 0x3]}}, {{0x1c, 0x1, {0xc0, 0x4, 0xd2a, 0x5, 0x1, 0x7, 0x6, 0x5}}, {0xe, 0x2, [0x9, 0x2, 0x10, 0x101, 0x5]}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x24000011}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x4, 0x78, 0x9}}}}]}, 0x48}}, 0x4008000) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300) 3.160580334s ago: executing program 0 (id=112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x4000}, 0x94) 3.115932517s ago: executing program 0 (id=113): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) accept(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4083}]}, 0x28}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000640)=""/150, &(0x7f0000000100)=0x96) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x0, [@default, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 3.027380851s ago: executing program 3 (id=114): unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0x1, 0x0, 0x3, 0x7, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0xf}, @sadb_address={0x3, 0x7, 0x32, 0x20, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x38}}, 0x4000010) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvfrom(r3, 0x0, 0x0, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x68041, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbb, &(0x7f0000000140)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @generic={{0x22, 0x4, 0x3, 0x8, 0xad, 0x64, 0x0, 0x10, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_addr={0x44, 0x2c, 0xbb, 0x1, 0xf, [{@loopback, 0x5}, {@multicast2, 0xb}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1ff}, {@multicast2, 0xd7e}]}, @timestamp_addr={0x44, 0x14, 0x1c, 0x1, 0x9, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xe}]}, @end, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0xa}, 0xb}, {@loopback, 0x3}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x17, 0x1d, [@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @broadcast, @loopback]}]}}, "064902f89a6ad9a8f7a1ce6f1ea2ca018c91382ae205b814c7be992402bae20f1bbae9d37e"}}}}, 0x0) socket$inet6(0xa, 0x80001, 0x0) socket$inet6(0xa, 0x1, 0x0) close(r2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005e6a7dc34a3d74e1caaa1da9de4ddf682815a3e85228370a4bde168f2de4552b6719e04ca7c16450f5290300000000000000067a00f8d1e72e1427c6de32687503cee780cc1a1ae1c4b1bbbd2ec3585094df639e269c591e0e22c81e32cd6b52cdd956d45819b3b7ce00cf8d063b970d7dcd4934379654ecf03a38788ee49dc85ba442d0e08638af69770ac141f96820f86a040d96ecd6cca246d99fd41402711dc9b8221b33e51c8aef7ee20ba7a2adcec00a1eedf7042813e29e1ba8f37bca01f77bad61d555ec8fbf8fd2eecbce29"], 0x48) 2.552814856s ago: executing program 1 (id=117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r2, 0xffffffffffffffff, 0x5, 0xffffffff}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x6, 0x18, 0x8, 0x40, 0x42, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r10}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, &(0x7f00000002c0)="cd31b963", &(0x7f0000000380)=""/100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000032000900000000000000009d0003000000"], 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) 2.452395713s ago: executing program 4 (id=118): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000540)=[{&(0x7f00000015c0)="04b78a911346", 0x6}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683", 0x99}, {&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001740)="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", 0x2b4}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @empty}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x9f, 0x0, 0xb, [0x1, 0x101, 0xea6, 0x1, 0x6, 0xd3e4374f, 0x101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x58}, 0x0) 2.364998032s ago: executing program 4 (id=119): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="5597dc6a8564"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x44840) r3 = accept4(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000140)=0x80, 0x800) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000001c0)=0x1, 0x4) 2.168902735s ago: executing program 4 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0xff07000000000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.094603563s ago: executing program 0 (id=121): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) sendto$inet(r2, &(0x7f0000000180)="9bcd51546d1bed270e9b4764e15e570b6fb61df8f2285245de8b810280a9411defa17cfb4b603e14d0ec603c7e53e30d4e04ce9e32293091f37ef097282250b7ab1952e7d70c46421dcf8a99200a658c444bca5a25d5b1389217ba5919aa0174a6a4a82335a988c4392338de344861", 0x3e, 0xd0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.024137082s ago: executing program 3 (id=122): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3, {0x9}}, 0x10) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) 1.631937792s ago: executing program 2 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40040) 1.607150634s ago: executing program 4 (id=126): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x51}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x5700}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2140, 0x0) 1.512592546s ago: executing program 1 (id=127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004"], 0x48) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x6}}]}}]}, 0x48}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.266051454s ago: executing program 4 (id=128): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000000000001000", 0x58}], 0x1) 1.19883276s ago: executing program 2 (id=129): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000540)=[{&(0x7f00000015c0)="04b78a911346", 0x6}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683", 0x99}, {&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6c3f35d859fbc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696b80093da6a97d6c4a54eca89d4979f12acbf89bca0c8cc5f490737b09fd77b8b7fcfa7b94787f81cff59ae583b5309bdb8", 0x2cb}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @empty}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x9f, 0x0, 0xb, [0x1, 0x101, 0xea6, 0x1, 0x6, 0xd3e4374f, 0x101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x58}, 0x0) 1.052313024s ago: executing program 0 (id=130): r0 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) pwrite64(r10, &(0x7f0000001080)="47bdddb6feac421268150a8c81f4c9bcb1a35669402e869a3e3aa2e6f73b324dc7df9cb4871feb1b2fe2721b132e659bffb586041ae6c4904c5d72f117fb8809672b06728820ed5aa0bd064eabc4c554a5b1fed37c4e5f55f88d79cced0ceac06d8630002568881f03e9864ddbfd3608303226a31f0b143fff0c7e05cbe0c0dcef11", 0x82, 0x3ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0xfdff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000300)=@xdp={0x2c, 0xc, r12, 0x30}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000380)="e8cc713d07fa45892dfe6eca4218b41c88defa8f4b3dac3d5349a13cd98f1e86b215117b06bde1b99ff6901aaad58531a0d90eb8f469c75c45049ee55f1976e62e11230594d92c90e797406e8ca6553c6860355d1323204354", 0x59}, {&(0x7f0000000580)="916a502c65ff855536c1958d48de099236426adb9e02e66a0776d3d23b0da6ef4e5c6d22e26032a681e72bc92915db4eadd03b5bc6199a4c86afe9bfd774f19fcbc33be86857cb6508c9a0fa27c73e16101e5a02e1f0553de6bdccb6646c3931b701828b8f2a989cb39b3d45b72589c2ec7a44b72a6405b4d38870ac05168c9fcb0fc1f98c3f90710973212204046b068cdabd89aff31b013510d0f9efd533c73d766226799afc355a7ff78ceab76ea2d492f09972fd5342fb266a2c28339b3c3383780fcc06b6ef5cc8e62a46ffc40b9406c7d521b662562f90ec12207bde3d7309d4b7e125ca2587ad502b7ad0037bfe", 0xf1}, {&(0x7f0000000680)="291e63eea31bbec4758ed2a05e561bf3becd43363b351c32a7dae43b047b096d25fdca9bc7927e4c93ba8c6782793dd96635468ccd51c2f56212211139c13437e2dbee661230454e29f4120223ee9a1ccb5b813f213671fa9d1cdb2d1d05fa735d42ad3b0e3836bd4a4ab40e21d939ef2ea03064a505bdfc7c8a895a37f84fa384a4188fa56a779da74fc1f521ac84821a7c2c4bd912f3b991ea435f9ba41afc01b5fa442d723cf1f5708fc136dd63febf44e4e50392954c8dd70e7e1499e31018f1d48a071da252f86711f9b1bfb32b35a58b13bd1441a3aa576a506ffe68ab9e388c0e2360967929fed047", 0xec}, {&(0x7f0000000080)}, {&(0x7f0000000780)="9f2fc86c97e757a9a9ddab3e4cec6cfeaea91f17f98dd7b8244c1c3a26610aafd079ff1e227ca52f2dc9307901f178ef6e1c44f32986fa031fe8d9e9db22e40c2bdcbecd26587924a223a8f006e32ea39ea7c22a64e616a6664d5b862009efa79a2d6864c52ecf1ed4a21bd66cda3bdf89088d8e77cd3e2f0d6c976d325f72e398e3fda4c57f9c54ddeb518cb4d7f1150a38db78d8f90922", 0x98}, {&(0x7f0000000840)="a51a3103b64a9a77d034a0b3829e6ec55c074b9bb4c9b3fbc3d2cb2d83890f22d78d8354cd1a030ecd6d63b834879fdf91df45ef1582caa2d048f9b9c609c57f9625733bb18e882545625a778229fe74f676dd903b595f9c2dc046b936f6365f30f8f5ea2fa9958245839a7e95055c2134b9b0ce329ad43f996686bd8a71e6530e64c5876833092816a4e344455af8df0dd4995f5df1cb9f694b4aaf416c614ca989cef72fdecae42b1e6f85bf0fb4efa1bffdd946635b", 0xb7}, {0x0}, {&(0x7f0000000a00)="563e0cb793390a3eea71aedfe10df5a21a91db60b5552706843d022b7aa5476e550786e5ef7cd69578762bc8039137f07c340d547a6914e5b8a2e83d4d9f2c97db663ea0c18d7cf9f8cc", 0x4a}, {&(0x7f0000000a80)="a3cd6aea6befacfb294219159b5bb86631bc22c80b44fbc3c3bf6488193c2d9bd4697ddd4b64506b7293beaadf6401ee8484e072788f39b9f5cca3a72085c190ebef7c6968a198c93bb4b32f25827a613afd9ff5754914477cbdcd5de506cd00c5260c8b5894352df07223f0", 0x6c}, {&(0x7f0000000b00)="a85ad5e6fd1ad7e6d7003d6062edb804273e968c48a63da7b2431445246f82f7445a14d5bb0cb86a68fd82c8c5e883a47523eeae92ac36cd19cb228e777dba6eaecf9eb96790881ba5a9592e46e417808925e01f7354b2022e70c94598490ddca027c62c9851f10c58aa3f57b019c047ae1523dc73b228ba9fa04b09304cb6c42e8a4ec26263881bb840f07c19c1caffe231e372f2d4464c745aecd9eac46b", 0x9f}], 0xa, &(0x7f0000000c80)=[{0xd0, 0x112, 0x8, "3a35f74d6f54e896677f7b3ab1fe8cd9857e99d74b99a44c0c9d596da0b2ac6dee5dd1a5affa0bfa2c1e450c82b862ea629157157cf3ac897843d323f6ec47f34b0e38342f6f0e8115846417054178d44927fb16ebce42d650b83692fd2b485d01a40df8ce25adc95ef7a2aa2b4e0321aeaf02621488eaf75628d8dc9b2d3c28952e07a88a29c9d07792c3d877aae96cb98f78b5500282486113023dc4b3a2cdd9d5391956bc89ba29b2523793d07668517220216ad8bc248d56395eb486"}, {0x88, 0x10d, 0x8, "750f5a51fbb28e265892ae239a287efff3f92018bfd566b2ee8f04eff54fc3fff8d8c814d07a959369bc1a1a0c4e2c97a26cd6b3dd697d05790fa70c7cdc3c625b48dc50ab5302886893643e3186d572bc479eef8e6401ba4a4fc4312059754474d3c9f2be92bf04172db481be6f41ba0f50fab9"}, {0x90, 0x10c, 0x9, "7e8da5014a72a90b9a3d6c11697d504cd8db0f7501ae7552fa65c22ce3539ea284c7553221c3738738d8c03eff4f3e78b33af54f76f14f4ae62d41ec0930175bc475c8c8ee02b8cb2e2b52afabcaf776d5af29b6f9f9ab57d72940d4b8093c38068b6036ae8d107c7915d591fddcf73937cd978b1deafef9566c"}, {0x70, 0x114, 0x80, "5f1a20acbb5515be62fefde2d01d6a3d42352b89f9a6df90d66f2e33a8557825136bc70e4c7f7ea3da87e71068c08b23b2daf8c7c400e449d9a1e521f68d8a10984f3a6032bdf324e83bae21e0a416085944b446ebfe8740b5a4"}], 0x258}, 0x20000000) 1.023580832s ago: executing program 1 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000ffe000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c00168008"], 0x38}}, 0x10) 1.002117426s ago: executing program 2 (id=132): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x2000, 0x20048054}, 0x8000) 924.514737ms ago: executing program 4 (id=133): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r0, &(0x7f00000008c0), 0x0, 0x408c0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) (async) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000300)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x9, 0x10001, 0x1, 0x9}) (async) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 854.947294ms ago: executing program 3 (id=134): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000007b000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 808.864634ms ago: executing program 1 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0xb) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'ip6gretap0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000c00)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0xb) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'ip6gretap0\x00'}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000c00)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r6, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) 421.1123ms ago: executing program 2 (id=136): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x97, "a11a0cc60d638f700451443fa7250dbc4f53e7174b1f99736a836ca2e71f118a91de0c11967e1cec318629e54f4cee7a7f8282308a255d1211d9879e817d442cdde85af18e55236cc28e508876bc5c75375528f4f443b8ffa36ed1d66295794aab3c278315aef57e2b101580399a31d48175fac99c8c37e3d81d9a61103baab91705ce2a477ce04848458b75122ada33a389778936d467"}, &(0x7f0000000200)=0x9f) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r0, 0xa0, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x20, @remote, 0xf}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e24, 0xffffff68, @private1, 0xffff0001}, @in6={0xa, 0x4e21, 0x733c, @local, 0x6}, @in6={0xa, 0x4e22, 0x0, @private1, 0x15}]}, &(0x7f0000000340)=0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x9fc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xa8, &(0x7f0000000380)=""/168, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xd, 0x1, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, r2, r3], 0x0, 0x10, 0x25}, 0x94) 197.500498ms ago: executing program 3 (id=137): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="2190", 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x810) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81004e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) close(0x4) 130.681297ms ago: executing program 2 (id=138): socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 50.080858ms ago: executing program 0 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40040) 624.385µs ago: executing program 1 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0xfffffffffffffffc, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x1, 0x100) (rerun: 64) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000ffffff7fffffffff000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 65.742516][ T5817] cgroup: Unknown subsys name 'net' [ 65.856563][ T5817] cgroup: Unknown subsys name 'cpuset' [ 65.865388][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.325171][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.482285][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.493667][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.505303][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.544210][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.563669][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.585830][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.603947][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.617425][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.632469][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.640595][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.827070][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.843781][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.852058][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.860924][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.869409][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.895448][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.913503][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.921364][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.929644][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.937717][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.956555][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.965079][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.973094][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.981662][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.989691][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.335853][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.558449][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 70.644531][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.698900][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.706197][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.714480][ T5828] bridge_slave_0: entered allmulticast mode [ 70.721506][ T5828] bridge_slave_0: entered promiscuous mode [ 70.735227][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.742366][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.749637][ T5828] bridge_slave_1: entered allmulticast mode [ 70.756649][ T5828] bridge_slave_1: entered promiscuous mode [ 70.796604][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 70.869810][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.923139][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.933467][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.940643][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.948324][ T5832] bridge_slave_0: entered allmulticast mode [ 70.955410][ T5832] bridge_slave_0: entered promiscuous mode [ 70.995632][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.002788][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.010278][ T5832] bridge_slave_1: entered allmulticast mode [ 71.017439][ T5832] bridge_slave_1: entered promiscuous mode [ 71.060465][ T5828] team0: Port device team_slave_0 added [ 71.098818][ T5828] team0: Port device team_slave_1 added [ 71.170423][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.180075][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.187778][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.195110][ T5838] bridge_slave_0: entered allmulticast mode [ 71.202043][ T5838] bridge_slave_0: entered promiscuous mode [ 71.220193][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 71.231525][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.239061][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.265204][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.279546][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.289108][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.296433][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.303858][ T5838] bridge_slave_1: entered allmulticast mode [ 71.310880][ T5838] bridge_slave_1: entered promiscuous mode [ 71.317892][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.325537][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.332673][ T5840] bridge_slave_0: entered allmulticast mode [ 71.340093][ T5840] bridge_slave_0: entered promiscuous mode [ 71.358015][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.365026][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.391065][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.406635][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.413086][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.443857][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.451628][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.459098][ T5840] bridge_slave_1: entered allmulticast mode [ 71.466306][ T5840] bridge_slave_1: entered promiscuous mode [ 71.538754][ T5832] team0: Port device team_slave_0 added [ 71.547819][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.590361][ T5832] team0: Port device team_slave_1 added [ 71.598412][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.611054][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.634392][ T52] Bluetooth: hci0: command tx timeout [ 71.668048][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.694397][ T5828] hsr_slave_0: entered promiscuous mode [ 71.700878][ T5828] hsr_slave_1: entered promiscuous mode [ 71.723638][ T52] Bluetooth: hci1: command tx timeout [ 71.754677][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.761635][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.787705][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.800382][ T5838] team0: Port device team_slave_0 added [ 71.817485][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.824698][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.831845][ T5843] bridge_slave_0: entered allmulticast mode [ 71.839141][ T5843] bridge_slave_0: entered promiscuous mode [ 71.858082][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.865699][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.892300][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.912293][ T5838] team0: Port device team_slave_1 added [ 71.920307][ T5840] team0: Port device team_slave_0 added [ 71.926728][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.933930][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.941068][ T5843] bridge_slave_1: entered allmulticast mode [ 71.948485][ T5843] bridge_slave_1: entered promiscuous mode [ 71.953458][ T52] Bluetooth: hci2: command tx timeout [ 72.008169][ T5840] team0: Port device team_slave_1 added [ 72.033996][ T52] Bluetooth: hci4: command tx timeout [ 72.034006][ T5835] Bluetooth: hci3: command tx timeout [ 72.068417][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.095522][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.102497][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.129741][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.153358][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.177686][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.184816][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.211345][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.223290][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.230242][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.256459][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.283852][ T5832] hsr_slave_0: entered promiscuous mode [ 72.290197][ T5832] hsr_slave_1: entered promiscuous mode [ 72.296728][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 72.302518][ T5832] Cannot create hsr debugfs directory [ 72.321808][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.328824][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.355627][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.380981][ T5843] team0: Port device team_slave_0 added [ 72.424775][ T5843] team0: Port device team_slave_1 added [ 72.538475][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.545778][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.572222][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.605368][ T5838] hsr_slave_0: entered promiscuous mode [ 72.611632][ T5838] hsr_slave_1: entered promiscuous mode [ 72.618013][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 72.624065][ T5838] Cannot create hsr debugfs directory [ 72.635850][ T5840] hsr_slave_0: entered promiscuous mode [ 72.642248][ T5840] hsr_slave_1: entered promiscuous mode [ 72.648735][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 72.654521][ T5840] Cannot create hsr debugfs directory [ 72.671683][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.678804][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.705549][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.896445][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.908893][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.943668][ T5843] hsr_slave_0: entered promiscuous mode [ 72.950321][ T5843] hsr_slave_1: entered promiscuous mode [ 72.956653][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 72.962387][ T5843] Cannot create hsr debugfs directory [ 72.980180][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.020060][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.286579][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.297434][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.315636][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.346182][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.416718][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.448046][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.462633][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.487789][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.571957][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.582239][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.594211][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.626186][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.695915][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.709603][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.723695][ T52] Bluetooth: hci0: command tx timeout [ 73.744548][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.776489][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.783715][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.794175][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.803377][ T52] Bluetooth: hci1: command tx timeout [ 73.822962][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.830295][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.861687][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.868878][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.940250][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.009976][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.028748][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.035782][ T52] Bluetooth: hci2: command tx timeout [ 74.049756][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.056956][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.086650][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.093815][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.113771][ T52] Bluetooth: hci3: command tx timeout [ 74.113801][ T5835] Bluetooth: hci4: command tx timeout [ 74.141612][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.189405][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.215723][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.222951][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.251468][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.261762][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.269042][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.340194][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.362411][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.398360][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.405564][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.417954][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.425148][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.456944][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.464127][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.495722][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.502867][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.551101][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.706912][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.791694][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.855536][ T5828] veth0_vlan: entered promiscuous mode [ 74.895643][ T5828] veth1_vlan: entered promiscuous mode [ 74.996919][ T5832] veth0_vlan: entered promiscuous mode [ 75.009215][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.041945][ T5828] veth0_macvtap: entered promiscuous mode [ 75.084389][ T5828] veth1_macvtap: entered promiscuous mode [ 75.100298][ T5832] veth1_vlan: entered promiscuous mode [ 75.116316][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.180525][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.193023][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.239054][ T1331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.255245][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.273107][ T5832] veth0_macvtap: entered promiscuous mode [ 75.282667][ T1331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.292643][ T1331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.320605][ T5838] veth0_vlan: entered promiscuous mode [ 75.329469][ T5832] veth1_macvtap: entered promiscuous mode [ 75.342465][ T1331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.400698][ T5838] veth1_vlan: entered promiscuous mode [ 75.459080][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.478523][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.520001][ T1342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.528967][ T1342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.562721][ T5840] veth0_vlan: entered promiscuous mode [ 75.575777][ T1342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.590182][ T5838] veth0_macvtap: entered promiscuous mode [ 75.600898][ T5838] veth1_macvtap: entered promiscuous mode [ 75.617656][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.622845][ T1342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.629877][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.658245][ T5840] veth1_vlan: entered promiscuous mode [ 75.706688][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.742548][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.780331][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.788373][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.796947][ T5835] Bluetooth: hci0: command tx timeout [ 75.803001][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.803115][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.821672][ T3537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.861600][ T3537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.875651][ T5835] Bluetooth: hci1: command tx timeout [ 75.884008][ T3585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.914321][ T3585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.936722][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.945625][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.972878][ T5843] veth0_vlan: entered promiscuous mode [ 75.989711][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.010897][ T5840] veth0_macvtap: entered promiscuous mode [ 76.039626][ T5938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.048665][ T5938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.059465][ T5938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.092553][ T5843] veth1_vlan: entered promiscuous mode [ 76.115387][ T5835] Bluetooth: hci2: command tx timeout [ 76.132190][ T5840] veth1_macvtap: entered promiscuous mode [ 76.182160][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.194718][ T5835] Bluetooth: hci3: command tx timeout [ 76.195398][ T52] Bluetooth: hci4: command tx timeout [ 76.226858][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.227090][ T5942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.237487][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.299568][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.342495][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.364069][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.380297][ T3505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.414574][ T3505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.439238][ T5843] veth0_macvtap: entered promiscuous mode [ 76.457420][ T3505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.473849][ T3505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.534987][ T5843] veth1_macvtap: entered promiscuous mode [ 76.644729][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.660483][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.700708][ T1342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.731905][ T1342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.810798][ T1342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.822282][ T5956] xt_bpf: check failed: parse error [ 76.833914][ T1342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.874750][ T5957] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 76.937717][ T5957] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.950588][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.971677][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.086479][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.099316][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.103310][ T5969] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 77.119021][ T5957] bond0 (unregistering): Released all slaves [ 77.158597][ T5970] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 77.208561][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.244762][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.348565][ T5973] unsupported nla_type 52263 [ 77.424561][ C0] Illegal XDP return value 16128 on prog (id 3) dev hsr_slave_1, expect packet loss! [ 77.440078][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.477713][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.615711][ T5980] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 77.791699][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.830964][ T30] audit: type=1800 audit(1760707082.947:2): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.21" name="memory.events" dev="tmpfs" ino=63 res=0 errno=0 [ 77.831126][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.859318][ T5995] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 77.885209][ T52] Bluetooth: hci0: command tx timeout [ 77.956015][ T52] Bluetooth: hci1: command tx timeout [ 77.994143][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 78.002328][ T5995] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 78.003392][ T6001] netlink: 'syz.2.22': attribute type 7 has an invalid length. [ 78.025176][ T6001] netlink: 'syz.2.22': attribute type 8 has an invalid length. [ 78.050781][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 78.120827][ T6002] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22'. [ 78.200687][ T52] Bluetooth: hci2: command tx timeout [ 78.232018][ T6001] netlink: 232 bytes leftover after parsing attributes in process `syz.2.22'. [ 78.274161][ T52] Bluetooth: hci4: command tx timeout [ 78.276146][ T5835] Bluetooth: hci3: command tx timeout [ 78.294219][ T6010] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 78.911385][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 78.937679][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 78.954132][ T6036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.389065][ T6052] openvswitch: netlink: Message has 193 unknown bytes. [ 79.410987][ T6050] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 79.432563][ T6050] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 79.543923][ T6057] Zero length message leads to an empty skb [ 79.551123][ T6059] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.190023][ T43] cfg80211: failed to load regulatory.db [ 80.506661][ T6094] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 80.759012][ T6103] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 80.865578][ T6111] tipc: Started in network mode [ 80.871435][ T6111] tipc: Node identity 4, cluster identity 4711 [ 80.877826][ T6111] tipc: Node number set to 4 [ 80.953617][ T6116] vlan2: entered promiscuous mode [ 80.958699][ T6116] syz_tun: entered promiscuous mode [ 81.128861][ T6122] __nla_validate_parse: 4 callbacks suppressed [ 81.128878][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 81.140620][ T6126] netlink: 'syz.4.65': attribute type 3 has an invalid length. [ 81.523097][ T6133] Bluetooth: MGMT ver 1.23 [ 81.574940][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 81.605534][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 81.884737][ T6147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.967323][ T6149] bond_slave_0: entered promiscuous mode [ 81.973241][ T6149] bond_slave_1: entered promiscuous mode [ 82.003920][ T6149] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.027989][ T6149] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 82.242749][ T6163] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 82.543832][ T6170] nbd: illegal input index -1 [ 82.833398][ T5151] Bluetooth: hci4: command 0x0405 tx timeout [ 82.865784][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 83.086451][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 83.102491][ T6189] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 83.136789][ T6189] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.86'. [ 83.166848][ T6197] xt_bpf: check failed: parse error [ 83.556281][ T5835] Bluetooth: hci2: command 0x0401 tx timeout [ 83.558106][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 83.768478][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 83.796670][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 83.806577][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 83.851631][ T6231] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 83.886519][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 84.161750][ T6237] netlink: 'syz.0.102': attribute type 16 has an invalid length. [ 84.173748][ T6237] netlink: 'syz.0.102': attribute type 17 has an invalid length. [ 84.238869][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.247542][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.467854][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.490482][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.610927][ T6255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.688976][ T6258] netlink: 'syz.1.111': attribute type 3 has an invalid length. [ 84.702087][ T6250] bond1: option mode: unable to set because the bond device has slaves [ 84.731832][ T6254] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 84.771237][ T6261] Bluetooth: MGMT ver 1.23 [ 84.815915][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.929252][ T6258] tipc: Started in network mode [ 84.936364][ T6258] tipc: Node identity 86942971fc0d, cluster identity 4711 [ 84.953506][ T6258] tipc: Enabled bearer , priority 0 [ 84.975456][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.008235][ T6257] syzkaller0: entered promiscuous mode [ 85.014117][ T6257] syzkaller0: entered allmulticast mode [ 85.027176][ T6258] tipc: Resetting bearer [ 85.064148][ T6258] tipc: Disabling bearer [ 85.079446][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.118105][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.150612][ T6276] FAULT_INJECTION: forcing a failure. [ 85.150612][ T6276] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.177631][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.4.116 Not tainted syzkaller #0 PREEMPT(full) [ 85.177656][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.177673][ T6276] Call Trace: [ 85.177680][ T6276] [ 85.177688][ T6276] dump_stack_lvl+0x189/0x250 [ 85.177719][ T6276] ? __pfx____ratelimit+0x10/0x10 [ 85.177744][ T6276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.177762][ T6276] ? __pfx__printk+0x10/0x10 [ 85.177780][ T6276] ? __might_fault+0xb0/0x130 [ 85.177808][ T6276] should_fail_ex+0x414/0x560 [ 85.177838][ T6276] _copy_from_user+0x2d/0xb0 [ 85.177861][ T6276] __sys_connect+0x123/0x440 [ 85.177883][ T6276] ? __fget_files+0x3a0/0x420 [ 85.177904][ T6276] ? __pfx___sys_connect+0x10/0x10 [ 85.177937][ T6276] ? rcu_is_watching+0x15/0xb0 [ 85.177969][ T6276] __x64_sys_connect+0x7a/0x90 [ 85.177992][ T6276] do_syscall_64+0xfa/0xfa0 [ 85.178010][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.178027][ T6276] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.178044][ T6276] ? clear_bhb_loop+0x60/0xb0 [ 85.178065][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.178082][ T6276] RIP: 0033:0x7fc3ffd8efc9 [ 85.178101][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.178115][ T6276] RSP: 002b:00007fc3fdff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 85.178134][ T6276] RAX: ffffffffffffffda RBX: 00007fc3fffe5fa0 RCX: 00007fc3ffd8efc9 [ 85.178145][ T6276] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 85.178154][ T6276] RBP: 00007fc3fdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 85.178164][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.178174][ T6276] R13: 00007fc3fffe6038 R14: 00007fc3fffe5fa0 R15: 00007ffc3ea5b878 [ 85.178204][ T6276] [ 85.668006][ T6287] bridge0: entered promiscuous mode [ 85.757333][ T6286] bridge0: left promiscuous mode [ 86.168351][ T6311] __nla_validate_parse: 2 callbacks suppressed [ 86.168369][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 86.555617][ T6325] xt_bpf: check failed: parse error [ 87.149303][ T6346] syz.4.133: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 87.221113][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.4.133 Not tainted syzkaller #0 PREEMPT(full) [ 87.221136][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.221147][ T6346] Call Trace: [ 87.221153][ T6346] [ 87.221162][ T6346] dump_stack_lvl+0x189/0x250 [ 87.221190][ T6346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.221209][ T6346] ? __pfx__printk+0x10/0x10 [ 87.221235][ T6346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 87.221254][ T6346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 87.221275][ T6346] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 87.221297][ T6346] warn_alloc+0x214/0x310 [ 87.221324][ T6346] ? __pfx_warn_alloc+0x10/0x10 [ 87.221353][ T6346] ? __get_vm_area_node+0x28f/0x300 [ 87.221372][ T6346] ? hash_ipportip_create+0x358/0xfe0 [ 87.221396][ T6346] __vmalloc_node_range_noprof+0x690/0x12d0 [ 87.221417][ T6346] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 87.221465][ T6346] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 87.221485][ T6346] ? hash_ipportip_create+0x358/0xfe0 [ 87.221507][ T6346] ? rcu_is_watching+0x15/0xb0 [ 87.221530][ T6346] ? hash_ipportip_create+0x358/0xfe0 [ 87.221549][ T6346] __kvmalloc_node_noprof+0x674/0x910 [ 87.221570][ T6346] ? hash_ipportip_create+0x358/0xfe0 [ 87.221587][ T6346] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 87.221606][ T6346] ? hash_ipportip_create+0x2fe/0xfe0 [ 87.221630][ T6346] hash_ipportip_create+0x358/0xfe0 [ 87.221657][ T6346] ? __nla_parse+0x40/0x60 [ 87.221677][ T6346] ? __pfx_hash_ipportip_create+0x10/0x10 [ 87.221698][ T6346] ip_set_create+0xa97/0x1940 [ 87.221719][ T6346] ? ip_set_create+0x4a2/0x1940 [ 87.221751][ T6346] ? __pfx_ip_set_create+0x10/0x10 [ 87.221810][ T6346] nfnetlink_rcv_msg+0xb4d/0x1130 [ 87.221833][ T6346] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 87.221875][ T6346] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 87.221894][ T6346] ? kmem_cache_free+0x19b/0x690 [ 87.221964][ T6346] netlink_rcv_skb+0x208/0x470 [ 87.221989][ T6346] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 87.222012][ T6346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.222047][ T6346] ? bpf_lsm_capable+0x9/0x20 [ 87.222063][ T6346] ? security_capable+0x7e/0x2e0 [ 87.222089][ T6346] nfnetlink_rcv+0x282/0x2590 [ 87.222111][ T6346] ? __dev_queue_xmit+0x284/0x3740 [ 87.222129][ T6346] ? __dev_queue_xmit+0x1bfb/0x3740 [ 87.222164][ T6346] ? __dev_queue_xmit+0x284/0x3740 [ 87.222193][ T6346] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 87.222237][ T6346] ? ref_tracker_free+0x63a/0x7d0 [ 87.222256][ T6346] ? __asan_memcpy+0x40/0x70 [ 87.222274][ T6346] ? __pfx_ref_tracker_free+0x10/0x10 [ 87.222289][ T6346] ? __skb_clone+0x63/0x7a0 [ 87.222311][ T6346] ? __skb_clone+0x483/0x7a0 [ 87.222336][ T6346] ? skb_clone+0x246/0x3a0 [ 87.222356][ T6346] ? __netlink_deliver_tap+0x807/0x850 [ 87.222379][ T6346] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.222409][ T6346] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.222440][ T6346] netlink_unicast+0x82f/0x9e0 [ 87.222472][ T6346] ? __pfx_netlink_unicast+0x10/0x10 [ 87.222493][ T6346] ? netlink_sendmsg+0x642/0xb30 [ 87.222514][ T6346] ? skb_put+0x11b/0x210 [ 87.222541][ T6346] netlink_sendmsg+0x805/0xb30 [ 87.222574][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.222601][ T6346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 87.222622][ T6346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 87.222643][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.222668][ T6346] __sock_sendmsg+0x21c/0x270 [ 87.222693][ T6346] ____sys_sendmsg+0x505/0x830 [ 87.222716][ T6346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.222751][ T6346] ? import_iovec+0x74/0xa0 [ 87.222777][ T6346] ___sys_sendmsg+0x21f/0x2a0 [ 87.222797][ T6346] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.222853][ T6346] ? __fget_files+0x2a/0x420 [ 87.222872][ T6346] ? __fget_files+0x3a0/0x420 [ 87.222904][ T6346] __x64_sys_sendmsg+0x19b/0x260 [ 87.222924][ T6346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.222959][ T6346] ? do_syscall_64+0xbe/0xfa0 [ 87.222981][ T6346] do_syscall_64+0xfa/0xfa0 [ 87.222997][ T6346] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.223014][ T6346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.223031][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 87.223052][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.223069][ T6346] RIP: 0033:0x7fc3ffd8efc9 [ 87.223085][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.223099][ T6346] RSP: 002b:00007fc3fdfd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.223119][ T6346] RAX: ffffffffffffffda RBX: 00007fc3fffe6090 RCX: 00007fc3ffd8efc9 [ 87.223132][ T6346] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000007 [ 87.223143][ T6346] RBP: 00007fc3ffe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.223154][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.223164][ T6346] R13: 00007fc3fffe6128 R14: 00007fc3fffe6090 R15: 00007ffc3ea5b878 [ 87.223195][ T6346] [ 87.763357][ T6346] Mem-Info: [ 87.766785][ T6346] active_anon:5849 inactive_anon:0 isolated_anon:0 [ 87.766785][ T6346] active_file:3206 inactive_file:39875 isolated_file:0 [ 87.766785][ T6346] unevictable:768 dirty:1661 writeback:0 [ 87.766785][ T6346] slab_reclaimable:10375 slab_unreclaimable:95130 [ 87.766785][ T6346] mapped:29377 shmem:1383 pagetables:1281 [ 87.766785][ T6346] sec_pagetables:0 bounce:0 [ 87.766785][ T6346] kernel_misc_reclaimable:0 [ 87.766785][ T6346] free:1328272 free_pcp:22651 free_cma:0 [ 88.044109][ T6346] Node 0 active_anon:22952kB inactive_anon:0kB active_file:12824kB inactive_file:159300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117232kB dirty:6628kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11828kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 88.078388][ T6346] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 88.108817][ T6346] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 88.152489][ T6346] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 88.175135][ T6346] Node 0 DMA32 free:1411596kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23152kB inactive_anon:0kB active_file:12824kB inactive_file:159300kB unevictable:1536kB writepending:6628kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:68080kB local_pcp:41428kB free_cma:0kB [ 88.233840][ T6378] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 88.245801][ T6378] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 88.255090][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(full) [ 88.264274][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.274332][ T6378] RIP: 0010:smc_diag_dump_proto+0x4bc/0x1fc0 [ 88.280318][ T6378] Code: 80 3c 2f 00 74 08 48 89 df e8 b0 f0 29 f7 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 85 f0 29 f7 4d 8b 2c 24 49 83 c5 [ 88.300005][ T6378] RSP: 0018:ffffc9000ec96f60 EFLAGS: 00010a06 [ 88.306069][ T6378] RAX: 1bd5a9d5a0000003 RBX: ffff888028f78650 RCX: ffff8880549a8000 [ 88.314035][ T6378] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 88.321986][ T6378] RBP: ffffc9000ec972b0 R08: ffff888028f7805f R09: 1ffff110051ef00b [ 88.329941][ T6378] R10: dffffc0000000000 R11: ffffed10051ef00c R12: dead4ead00000018 [ 88.337898][ T6378] R13: dffffc0000000000 R14: ffff888028f78000 R15: 1ffff110051ef0ca [ 88.345857][ T6378] FS: 00007f2f976416c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 88.354777][ T6378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.361357][ T6378] CR2: 00007ff6377d3d58 CR3: 000000007cd6a000 CR4: 00000000003526f0 [ 88.369319][ T6378] Call Trace: [ 88.372587][ T6378] [ 88.375510][ T6378] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 88.381125][ T6378] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 88.386662][ T6378] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 88.392199][ T6378] ? __phys_addr+0xd3/0x180 [ 88.396689][ T6378] ? __kasan_kmalloc_large+0x85/0xa0 [ 88.401970][ T6378] ? rcu_is_watching+0x15/0xb0 [ 88.406729][ T6378] ? rcu_is_watching+0x15/0xb0 [ 88.411479][ T6378] ? trace_kmalloc+0x1f/0xd0 [ 88.416055][ T6378] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 88.422629][ T6378] ? __alloc_skb+0x142/0x2d0 [ 88.427311][ T6378] ? __build_skb_around+0x262/0x3f0 [ 88.432531][ T6378] smc_diag_dump+0x59/0xa0 [ 88.436943][ T6378] netlink_dump+0x6e4/0xe90 [ 88.441442][ T6378] ? __pfx_netlink_dump+0x10/0x10 [ 88.446452][ T6378] ? __netlink_lookup+0x7db/0x8a0 [ 88.451469][ T6378] ? netlink_lookup+0x30/0x200 [ 88.456221][ T6378] ? netlink_lookup+0x30/0x200 [ 88.460971][ T6378] ? netlink_lookup+0x30/0x200 [ 88.465724][ T6378] __netlink_dump_start+0x5cb/0x7e0 [ 88.471352][ T6378] smc_diag_handler_dump+0x178/0x210 [ 88.476624][ T6378] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 88.482411][ T6378] ? __pfx_smc_diag_dump+0x10/0x10 [ 88.487526][ T6378] ? sock_diag_lock_handler+0x19/0x290 [ 88.493321][ T6378] ? sock_diag_lock_handler+0x19/0x290 [ 88.498768][ T6378] sock_diag_rcv_msg+0x4cc/0x600 [ 88.503692][ T6378] netlink_rcv_skb+0x208/0x470 [ 88.508445][ T6378] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 88.513890][ T6378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.519169][ T6378] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.524384][ T6378] netlink_unicast+0x82f/0x9e0 [ 88.529400][ T6378] ? __pfx_netlink_unicast+0x10/0x10 [ 88.534670][ T6378] ? netlink_sendmsg+0x642/0xb30 [ 88.539598][ T6378] ? skb_put+0x11b/0x210 [ 88.544179][ T6378] netlink_sendmsg+0x805/0xb30 [ 88.548943][ T6378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.554217][ T6378] ? aa_sock_msg_perm+0xf1/0x1d0 [ 88.559146][ T6378] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 88.564419][ T6378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.569692][ T6378] __sock_sendmsg+0x21c/0x270 [ 88.574358][ T6378] ____sys_sendmsg+0x505/0x830 [ 88.579115][ T6378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.584391][ T6378] ? import_iovec+0x74/0xa0 [ 88.588885][ T6378] ___sys_sendmsg+0x21f/0x2a0 [ 88.593553][ T6378] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.598743][ T6378] ? __fget_files+0x2a/0x420 [ 88.603321][ T6378] ? __fget_files+0x3a0/0x420 [ 88.607984][ T6378] __x64_sys_sendmsg+0x19b/0x260 [ 88.612912][ T6378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.618445][ T6378] ? do_syscall_64+0xbe/0xfa0 [ 88.623106][ T6378] do_syscall_64+0xfa/0xfa0 [ 88.627592][ T6378] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.632773][ T6378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.638825][ T6378] ? clear_bhb_loop+0x60/0xb0 [ 88.643497][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.649374][ T6378] RIP: 0033:0x7f2f9678efc9 [ 88.653774][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.673369][ T6378] RSP: 002b:00007f2f97641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.681773][ T6378] RAX: ffffffffffffffda RBX: 00007f2f969e5fa0 RCX: 00007f2f9678efc9 [ 88.689821][ T6378] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000044 [ 88.697779][ T6378] RBP: 00007f2f96811f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.705761][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.713716][ T6378] R13: 00007f2f969e6038 R14: 00007f2f969e5fa0 R15: 00007ffdc82a5528 [ 88.721679][ T6378] [ 88.724683][ T6378] Modules linked in: [ 88.730876][ T6378] ---[ end trace 0000000000000000 ]--- [ 88.737156][ T6378] RIP: 0010:smc_diag_dump_proto+0x4bc/0x1fc0 [ 88.743247][ T6378] Code: 80 3c 2f 00 74 08 48 89 df e8 b0 f0 29 f7 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 85 f0 29 f7 4d 8b 2c 24 49 83 c5 [ 88.763060][ T6378] RSP: 0018:ffffc9000ec96f60 EFLAGS: 00010a06 [ 88.769149][ T6378] RAX: 1bd5a9d5a0000003 RBX: ffff888028f78650 RCX: ffff8880549a8000 [ 88.777132][ T6378] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 88.785315][ T6378] RBP: ffffc9000ec972b0 R08: ffff888028f7805f R09: 1ffff110051ef00b [ 88.793475][ T6378] R10: dffffc0000000000 R11: ffffed10051ef00c R12: dead4ead00000018 [ 88.801461][ T6378] R13: dffffc0000000000 R14: ffff888028f78000 R15: 1ffff110051ef0ca [ 88.809439][ T6378] FS: 00007f2f976416c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 88.818480][ T6378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.825153][ T6378] CR2: 00007ff6377d3d58 CR3: 000000007cd6a000 CR4: 00000000003526f0 [ 88.833115][ T6378] Kernel panic - not syncing: Fatal exception [ 88.839417][ T6378] Kernel Offset: disabled [ 88.843722][ T6378] Rebooting in 86400 seconds..