last executing test programs: 9.189391962s ago: executing program 4 (id=143): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b00"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r2}) 6.811333098s ago: executing program 3 (id=146): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) 6.790813174s ago: executing program 1 (id=147): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffce1, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000ec0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 6.473736859s ago: executing program 4 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @local, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@udp={0xc, 0x6, "abbec1", 0x10, 0x11, 0x1, @empty, @local, {[], {0x4e23, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x27, 0x100, @val=0x80}}}}}}}}}}, 0x4e) 6.302594573s ago: executing program 0 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7870c7cdad9bcb47380c988ca", 0xe}, {&(0x7f0000000340)="448b420bd2dee5dfdc16", 0xa}, {&(0x7f0000000100)="301ed9f9a338ef93c403155b8869", 0xe}], 0x3) 6.120404159s ago: executing program 3 (id=150): semop(0x0, &(0x7f00000002c0)=[{0x0, 0x8, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x1, 0x1000}, {0x3, 0x89b4, 0x1000}, {0x2, 0x8, 0x1000}], 0x3, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 6.120056917s ago: executing program 2 (id=151): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) 5.402027489s ago: executing program 3 (id=152): syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000006a2ddcf6177a88a833008100190088"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.357319474s ago: executing program 1 (id=153): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.237766312s ago: executing program 2 (id=154): r0 = socket$inet6(0xa, 0x3, 0x76) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a000080060000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000000fbffffffffffffff000000000000000002000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) close(0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xd0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.59812564s ago: executing program 1 (id=155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xc, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 4.568830846s ago: executing program 0 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x3, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 4.506411037s ago: executing program 4 (id=157): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r0, &(0x7f0000000040)=0x24f3fffffffffffc, r1, 0x0, 0x401, 0x1) 4.436628101s ago: executing program 3 (id=158): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b00"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r2}) 4.265936274s ago: executing program 2 (id=159): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 3.735608579s ago: executing program 4 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x0, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000894) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e, 0x12}, 0x80, &(0x7f0000000080)}, 0x0) 3.610575485s ago: executing program 0 (id=161): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@noauto_da_alloc}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x8050) 3.07046369s ago: executing program 1 (id=162): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0xe8, 0xe8, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local, {[0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@rand_addr=0x64010101, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz1\x00', {0xb3b5}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 2.525685648s ago: executing program 3 (id=163): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffce1, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000ec0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 2.374338148s ago: executing program 2 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.048539995s ago: executing program 0 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.021998119s ago: executing program 1 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7870c7cdad9bcb47380c988ca", 0xe}, {&(0x7f0000000340)="448b420bd2dee5dfdc16", 0xa}, {&(0x7f0000000100)="301ed9f9a338ef93c403155b8869", 0xe}], 0x3) 1.497058853s ago: executing program 4 (id=167): ftruncate(0xffffffffffffffff, 0x51a9497) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 1.183707298s ago: executing program 0 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0xffff0002, 0xffffffc3, 0xfffffe51, &(0x7f0000000180)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.157557577s ago: executing program 2 (id=169): r0 = socket$inet6(0xa, 0x3, 0x76) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a000080060000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000000fbffffffffffffff000000000000000002000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) close(0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xd0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.130548959s ago: executing program 3 (id=170): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @private2, 0xffff2d72}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000100)="0e", 0x1}], 0x1}}], 0x1, 0x44) listen(r0, 0x100101) socket$rxrpc(0x21, 0x2, 0xa) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) accept(r0, 0x0, 0x0) 493.274296ms ago: executing program 4 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x3, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 78.657784ms ago: executing program 0 (id=172): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000200)={0x0, 0x7, 0x1000, 0x0, 0x0, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETMODE(r0, 0x5601, 0x0) 58.374108ms ago: executing program 1 (id=173): pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 2 (id=174): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 198.122130][ T5554] cgroup: Unknown subsys name 'net' [ 198.254286][ T5554] cgroup: Unknown subsys name 'cpuset' [ 198.272578][ T5554] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 205.335949][ T5554] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 209.282724][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.289652][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.377510][ T5573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.389216][ T5573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.402916][ T5573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.419703][ T5573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.435330][ T5573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.487335][ T5577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.501734][ T5577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.515888][ T5577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.535245][ T5581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.550076][ T5581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.565840][ T5581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.576445][ T4870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.618869][ T4870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.638176][ T4870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.649434][ T4870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.649602][ T5583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.667791][ T5583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.677630][ T4870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.686552][ T5583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.700957][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.717864][ T5583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.729339][ T5577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.754598][ T5577] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.770860][ T5577] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.783074][ T5577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.523441][ T5577] Bluetooth: hci0: command tx timeout [ 212.603417][ T5577] Bluetooth: hci1: command tx timeout [ 212.763537][ T5577] Bluetooth: hci3: command tx timeout [ 212.769320][ T4870] Bluetooth: hci2: command tx timeout [ 212.843426][ T4870] Bluetooth: hci4: command tx timeout [ 214.603481][ T4870] Bluetooth: hci0: command tx timeout [ 214.684491][ T4870] Bluetooth: hci1: command tx timeout [ 214.843480][ T4870] Bluetooth: hci2: command tx timeout [ 214.843719][ T5577] Bluetooth: hci3: command tx timeout [ 214.923505][ T5577] Bluetooth: hci4: command tx timeout [ 216.104265][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.128592][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.153784][ T5578] bridge_slave_0: entered allmulticast mode [ 216.172285][ T5578] bridge_slave_0: entered promiscuous mode [ 216.249948][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.273833][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.282016][ T5578] bridge_slave_1: entered allmulticast mode [ 216.303054][ T5578] bridge_slave_1: entered promiscuous mode [ 216.681963][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.683983][ T5577] Bluetooth: hci0: command tx timeout [ 216.696396][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.718205][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.759116][ T5576] bridge_slave_0: entered allmulticast mode [ 216.763566][ T5577] Bluetooth: hci1: command tx timeout [ 216.825185][ T5576] bridge_slave_0: entered promiscuous mode [ 216.871879][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.879624][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.887529][ T5576] bridge_slave_1: entered allmulticast mode [ 216.898130][ T5576] bridge_slave_1: entered promiscuous mode [ 216.909370][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.917809][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.927045][ T5577] Bluetooth: hci2: command tx timeout [ 216.933546][ T5577] Bluetooth: hci3: command tx timeout [ 216.933757][ T5572] bridge_slave_0: entered allmulticast mode [ 216.949594][ T5572] bridge_slave_0: entered promiscuous mode [ 216.997515][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.014113][ T5577] Bluetooth: hci4: command tx timeout [ 217.120256][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.132037][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.141761][ T5572] bridge_slave_1: entered allmulticast mode [ 217.158551][ T5572] bridge_slave_1: entered promiscuous mode [ 217.170357][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.178340][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.186100][ T5580] bridge_slave_0: entered allmulticast mode [ 217.197172][ T5580] bridge_slave_0: entered promiscuous mode [ 217.219311][ T5578] team0: Port device team_slave_0 added [ 217.284499][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.292501][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.300770][ T5580] bridge_slave_1: entered allmulticast mode [ 217.310001][ T5580] bridge_slave_1: entered promiscuous mode [ 217.330102][ T5578] team0: Port device team_slave_1 added [ 217.373570][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.505021][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.524212][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.592106][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.600263][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.608528][ T5585] bridge_slave_0: entered allmulticast mode [ 217.617375][ T5585] bridge_slave_0: entered promiscuous mode [ 217.716243][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.735582][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.749692][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.757725][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.784164][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.797195][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.805705][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.813736][ T5585] bridge_slave_1: entered allmulticast mode [ 217.822305][ T5585] bridge_slave_1: entered promiscuous mode [ 217.850404][ T5576] team0: Port device team_slave_0 added [ 217.895924][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.908400][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.915733][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.942629][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.990942][ T5576] team0: Port device team_slave_1 added [ 218.133773][ T5572] team0: Port device team_slave_0 added [ 218.180169][ T5580] team0: Port device team_slave_0 added [ 218.197133][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.244681][ T5572] team0: Port device team_slave_1 added [ 218.262101][ T5580] team0: Port device team_slave_1 added [ 218.276893][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.289475][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.297366][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.324588][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.479009][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.486637][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.513903][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.661255][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.668535][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.696393][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.732006][ T5578] hsr_slave_0: entered promiscuous mode [ 218.742352][ T5578] hsr_slave_1: entered promiscuous mode [ 218.755607][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.762768][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.789401][ T5577] Bluetooth: hci0: command tx timeout [ 218.795617][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.819849][ T5585] team0: Port device team_slave_0 added [ 218.841691][ T5585] team0: Port device team_slave_1 added [ 218.847740][ T5577] Bluetooth: hci1: command tx timeout [ 218.854008][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.861806][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.890090][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.908177][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.916103][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.942979][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.013687][ T5577] Bluetooth: hci3: command tx timeout [ 219.013783][ T4870] Bluetooth: hci2: command tx timeout [ 219.093678][ T5577] Bluetooth: hci4: command tx timeout [ 219.142657][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.150008][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.177215][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.238374][ T5576] hsr_slave_0: entered promiscuous mode [ 219.247531][ T5576] hsr_slave_1: entered promiscuous mode [ 219.256989][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 219.262859][ T5576] Cannot create hsr debugfs directory [ 219.292951][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.300605][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.329731][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.497474][ T5572] hsr_slave_0: entered promiscuous mode [ 219.507111][ T5572] hsr_slave_1: entered promiscuous mode [ 219.516524][ T5572] debugfs: 'hsr0' already exists in 'hsr' [ 219.522472][ T5572] Cannot create hsr debugfs directory [ 219.598123][ T5580] hsr_slave_0: entered promiscuous mode [ 219.608848][ T5580] hsr_slave_1: entered promiscuous mode [ 219.617807][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 219.623877][ T5580] Cannot create hsr debugfs directory [ 220.010358][ T5585] hsr_slave_0: entered promiscuous mode [ 220.019454][ T5585] hsr_slave_1: entered promiscuous mode [ 220.028278][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 220.034410][ T5585] Cannot create hsr debugfs directory [ 221.241841][ T5578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.279862][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.294539][ T5578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.315311][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.326833][ T5578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.349087][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.376450][ T5578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.395642][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.521930][ T5572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.554150][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.565416][ T5572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.585863][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.597336][ T5572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.620036][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.652425][ T5572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.673702][ T5572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.889028][ T5580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.911635][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.944539][ T5580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.968448][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.006074][ T5580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.025911][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.036955][ T5580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.059190][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.334192][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.355298][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.391303][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.416093][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.427336][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.449371][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.506966][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.529585][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.762070][ T5576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.789970][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.822625][ T5576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.848186][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.858411][ T5576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.877435][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.921720][ T5576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.945109][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.176145][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.270269][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.396152][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.454711][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.462186][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.541781][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.595566][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.603423][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.698714][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.706333][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.787471][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.861902][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.869471][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.098753][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.221219][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.228706][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.267943][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.377813][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.385498][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.670188][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.758993][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.917160][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.924982][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.127124][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.134817][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.211769][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.361406][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.369287][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.478605][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.487035][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.319834][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.217531][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.398671][ T5578] veth0_vlan: entered promiscuous mode [ 228.644413][ T5578] veth1_vlan: entered promiscuous mode [ 229.159129][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.372154][ T5572] veth0_vlan: entered promiscuous mode [ 229.410913][ T5578] veth0_macvtap: entered promiscuous mode [ 229.550301][ T5578] veth1_macvtap: entered promiscuous mode [ 229.615237][ T5572] veth1_vlan: entered promiscuous mode [ 229.960822][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.080804][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.237229][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.329211][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.389301][ T5580] veth0_vlan: entered promiscuous mode [ 230.488691][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.501731][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.570869][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.591391][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.688497][ T5572] veth0_macvtap: entered promiscuous mode [ 230.744069][ T5580] veth1_vlan: entered promiscuous mode [ 230.882412][ T5572] veth1_macvtap: entered promiscuous mode [ 231.205866][ T5585] veth0_vlan: entered promiscuous mode [ 231.287308][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.451086][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.530571][ T5585] veth1_vlan: entered promiscuous mode [ 231.620040][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.632948][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.709656][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.722268][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.783265][ T5580] veth0_macvtap: entered promiscuous mode [ 231.917869][ T5580] veth1_macvtap: entered promiscuous mode [ 232.383867][ T5585] veth0_macvtap: entered promiscuous mode [ 232.426843][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.451369][ T5585] veth1_macvtap: entered promiscuous mode [ 232.600583][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.678024][ T5576] veth0_vlan: entered promiscuous mode [ 232.789695][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.837950][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.868564][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.945822][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.983876][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.011338][ T5576] veth1_vlan: entered promiscuous mode [ 233.187976][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.380957][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.436945][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.455099][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.504589][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.868619][ T5576] veth0_macvtap: entered promiscuous mode [ 234.000805][ T5576] veth1_macvtap: entered promiscuous mode [ 234.480061][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.638995][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.861358][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.892993][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.965308][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.996581][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.931283][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.976629][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.287827][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.330001][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.957355][ T5578] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 238.695688][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.752498][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.943799][ T5815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2'. [ 239.288268][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.336406][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.098419][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.152078][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.464828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.506802][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.805463][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.865007][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.319023][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.384814][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.250779][ T5867] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 244.342958][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.351756][ T5867] netlink: 'syz.1.11': attribute type 3 has an invalid length. [ 244.396885][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.414775][ T5867] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11'. [ 245.145623][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.209979][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.148256][ T5893] tipc: Enabling of bearer rejected, failed to enable media [ 248.999738][ T5916] syzkaller1: entered promiscuous mode [ 249.055507][ T5916] syzkaller1: entered allmulticast mode [ 250.172374][ T5938] syzkaller0: entered promiscuous mode [ 250.251326][ T5938] syzkaller0: entered allmulticast mode [ 250.800351][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 251.531441][ T5945] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 251.649624][ T5949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.656905][ T5956] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 252.087968][ T5953] syzkaller0: entered promiscuous mode [ 252.115494][ T5953] syzkaller0: entered allmulticast mode [ 254.113725][ T5983] Zero length message leads to an empty skb [ 254.931176][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 256.639847][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 258.064385][ T6022] netlink: 'syz.3.61': attribute type 14 has an invalid length. [ 259.378337][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 259.641119][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 259.656272][ T6043] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET) [ 261.969318][ T6066] vcan0: tx address claim with different name [ 263.367944][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 265.374345][ T6094] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 265.457923][ T6100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.867251][ T6108] loop2: detected capacity change from 0 to 2048 [ 267.159285][ T6108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.902928][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 268.045242][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.477939][ T6129] Bluetooth: MGMT ver 1.23 [ 270.175318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 270.483348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.584905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 270.799738][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.807250][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.901259][ T6141] loop0: detected capacity change from 0 to 512 [ 272.360837][ T6141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.896850][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 272.929277][ T5572] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.047954][ T6146] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 273.175529][ T6147] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 273.981045][ T6157] syzkaller0: entered promiscuous mode [ 274.014719][ T6157] syzkaller0: entered allmulticast mode [ 274.260684][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 275.331909][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 275.680827][ T6179] netlink: 436 bytes leftover after parsing attributes in process `syz.4.114'. [ 275.737299][ T6179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 276.610953][ T6183] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 276.688344][ T6184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.892074][ T5577] Bluetooth: hci4: link tx timeout [ 277.897828][ T5577] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.499774][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 279.044071][ T6209] syzkaller0: entered promiscuous mode [ 279.065327][ T6209] syzkaller0: entered allmulticast mode [ 279.148569][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 279.633032][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 279.963631][ T4870] Bluetooth: hci4: command 0x0406 tx timeout [ 280.328770][ T6222] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 280.447417][ T6228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.529516][ T6239] tipc: Started in network mode [ 281.558483][ T6239] tipc: Node identity e62f415b24a4, cluster identity 4711 [ 281.598307][ T6239] tipc: Enabled bearer , priority 0 [ 281.691820][ T6247] loop0: detected capacity change from 0 to 128 [ 281.713321][ T6237] tipc: Disabling bearer [ 281.867906][ T29] audit: type=1800 audit(1777690345.990:2): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.136" name="bus" dev="loop0" ino=1048605 res=0 errno=0 [ 282.983851][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 283.182420][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.193058][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.835936][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 283.947302][ T6250] bridge_slave_0: left allmulticast mode [ 284.002567][ T6250] bridge_slave_0: left promiscuous mode [ 284.040115][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.321743][ T6250] bridge_slave_1: left allmulticast mode [ 284.360408][ T6250] bridge_slave_1: left promiscuous mode [ 284.398491][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.669559][ T6250] bond0: (slave bond_slave_0): Releasing backup interface [ 284.794955][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 285.035840][ T6250] bond0: (slave bond_slave_1): Releasing backup interface [ 285.220819][ T6250] team0: Port device team_slave_0 removed [ 285.361101][ T6250] team0: Port device team_slave_1 removed [ 285.440806][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.476739][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.500573][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.522551][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.576767][ T6250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.715849][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.828791][ T6287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.411278][ T6295] syzkaller0: entered promiscuous mode [ 286.462401][ T6295] syzkaller0: entered allmulticast mode [ 287.138890][ T6309] tipc: Started in network mode [ 287.177843][ T6309] tipc: Node identity f230edde2ff, cluster identity 4711 [ 287.230704][ T6309] tipc: Enabled bearer , priority 0 [ 287.396870][ T6299] tipc: Disabling bearer [ 287.670047][ T6313] netlink: 36 bytes leftover after parsing attributes in process `syz.3.152'. [ 287.780291][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 288.570320][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 288.657188][ T6322] syzkaller0: entered promiscuous mode [ 288.696922][ T6322] syzkaller0: entered allmulticast mode [ 288.939627][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 289.463867][ T6330] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 289.546424][ T6337] loop0: detected capacity change from 0 to 512 [ 289.727176][ T6333] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 289.762623][ T6337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.894712][ T6337] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.017141][ T6346] syzkaller0: entered promiscuous mode [ 290.081290][ T6346] syzkaller0: entered allmulticast mode [ 290.607277][ T5572] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.771583][ T6349] syzkaller0: entered promiscuous mode [ 290.835954][ T6349] syzkaller0: entered allmulticast mode [ 291.366193][ T6360] tipc: Started in network mode [ 291.453711][ T6360] tipc: Node identity 4e931989124b, cluster identity 4711 [ 291.569048][ T6360] tipc: Enabled bearer , priority 0 [ 291.799910][ T6355] tipc: Disabling bearer [ 291.936130][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 292.679864][ T6373] ===================================================== [ 292.687447][ T6373] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 292.696354][ T6373] mptcp_established_options+0x112f/0x3530 [ 292.706364][ T6373] tcp_established_options+0x312/0xcc0 [ 292.713787][ T6373] __tcp_transmit_skb+0x5dc/0x5fe0 [ 292.719465][ T6373] __tcp_send_ack+0x967/0xad0 [ 292.727121][ T6373] tcp_send_ack+0x3d/0x60 [ 292.732082][ T6373] mptcp_subflow_shutdown+0x164/0x690 [ 292.738178][ T6373] mptcp_check_send_data_fin+0x31b/0x3d0 [ 292.744579][ T6373] __mptcp_close+0x860/0x1360 [ 292.749873][ T6373] mptcp_close+0x42/0x260 [ 292.755066][ T6373] inet_release+0x1ee/0x2a0 [ 292.760192][ T6373] sock_close+0xd6/0x2f0 [ 292.765436][ T6373] __fput+0x60e/0x1010 [ 292.769841][ T6373] ____fput+0x25/0x30 [ 292.774705][ T6373] task_work_run+0x208/0x2b0 [ 292.779755][ T6373] exit_to_user_mode_loop+0x306/0x1b60 [ 292.785733][ T6373] do_syscall_64+0x236/0xf80 [ 292.790773][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.797122][ T6373] [ 292.799563][ T6373] Local variable opts created at: [ 292.808772][ T6373] __tcp_transmit_skb+0x4d/0x5fe0 [ 292.815284][ T6373] __tcp_send_ack+0x967/0xad0 [ 292.820464][ T6373] [ 292.823029][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.4.171 Not tainted syzkaller #0 PREEMPT(full) [ 292.832873][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.844471][ T6373] ===================================================== [ 292.851809][ T6373] Disabling lock debugging due to kernel taint [ 292.951117][ T6373] Kernel panic - not syncing: kmsan.panic set ... [ 292.957862][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.4.171 Tainted: G B syzkaller #0 PREEMPT(full) [ 292.969138][ T6373] Tainted: [B]=BAD_PAGE [ 292.973596][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.984552][ T6373] Call Trace: [ 292.987974][ T6373] [ 292.991041][ T6373] __dump_stack+0x26/0x30 [ 292.995630][ T6373] dump_stack_lvl+0x50/0x1c0 [ 293.000532][ T6373] ? dump_stack+0x12/0x25 [ 293.005104][ T6373] dump_stack+0x1e/0x25 [ 293.009482][ T6373] vpanic+0x7b4/0x1430 [ 293.013828][ T6373] panic+0x15d/0x160 [ 293.018008][ T6373] kmsan_report+0x31a/0x320 [ 293.022767][ T6373] ? __msan_warning+0x1b/0x30 [ 293.027667][ T6373] ? mptcp_established_options+0x112f/0x3530 [ 293.033970][ T6373] ? tcp_established_options+0x312/0xcc0 [ 293.039870][ T6373] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 293.045414][ T6373] ? __tcp_send_ack+0x967/0xad0 [ 293.050461][ T6373] ? tcp_send_ack+0x3d/0x60 [ 293.055218][ T6373] ? mptcp_subflow_shutdown+0x164/0x690 [ 293.061152][ T6373] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 293.067533][ T6373] ? __mptcp_close+0x860/0x1360 [ 293.073100][ T6373] ? mptcp_close+0x42/0x260 [ 293.077956][ T6373] ? inet_release+0x1ee/0x2a0 [ 293.082961][ T6373] ? sock_close+0xd6/0x2f0 [ 293.087627][ T6373] ? __fput+0x60e/0x1010 [ 293.092090][ T6373] ? ____fput+0x25/0x30 [ 293.096473][ T6373] ? task_work_run+0x208/0x2b0 [ 293.101552][ T6373] ? exit_to_user_mode_loop+0x306/0x1b60 [ 293.107514][ T6373] ? do_syscall_64+0x236/0xf80 [ 293.112596][ T6373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.119064][ T6373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.125541][ T6373] ? kmsan_get_metadata+0xf1/0x160 [ 293.130912][ T6373] ? tcp_established_options+0x312/0xcc0 [ 293.136895][ T6373] ? __msan_warning+0x1b/0x30 [ 293.141795][ T6373] ? filter_irq_stacks+0x13f/0x190 [ 293.147113][ T6373] ? stack_depot_save_flags+0x35/0x790 [ 293.152848][ T6373] ? kmsan_get_metadata+0xf1/0x160 [ 293.158231][ T6373] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 293.164989][ T6373] ? kmsan_get_metadata+0xf1/0x160 [ 293.170416][ T6373] __msan_warning+0x1b/0x30 [ 293.175257][ T6373] mptcp_established_options+0x112f/0x3530 [ 293.181382][ T6373] tcp_established_options+0x312/0xcc0 [ 293.187174][ T6373] __tcp_transmit_skb+0x5dc/0x5fe0 [ 293.192520][ T6373] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 293.199043][ T6373] ? kmsan_get_metadata+0xf1/0x160 [ 293.204577][ T6373] ? kmsan_get_metadata+0xf1/0x160 [ 293.209938][ T6373] ? kmsan_get_metadata+0xf1/0x160 [ 293.215298][ T6373] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.221471][ T6373] ? __alloc_skb+0xb7d/0x1190 [ 293.226388][ T6373] __tcp_send_ack+0x967/0xad0 [ 293.231289][ T6373] tcp_send_ack+0x3d/0x60 [ 293.235867][ T6373] mptcp_subflow_shutdown+0x164/0x690 [ 293.241549][ T6373] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.247619][ T6373] mptcp_check_send_data_fin+0x31b/0x3d0 [ 293.253491][ T6373] __mptcp_close+0x860/0x1360 [ 293.258412][ T6373] ? __pfx_mptcp_close+0x10/0x10 [ 293.263778][ T6373] mptcp_close+0x42/0x260 [ 293.268341][ T6373] ? __pfx_mptcp_close+0x10/0x10 [ 293.273528][ T6373] inet_release+0x1ee/0x2a0 [ 293.278275][ T6373] ? __pfx_inet_release+0x10/0x10 [ 293.283514][ T6373] sock_close+0xd6/0x2f0 [ 293.288186][ T6373] ? __pfx_sock_close+0x10/0x10 [ 293.293271][ T6373] __fput+0x60e/0x1010 [ 293.297578][ T6373] ? __pfx_____fput+0x10/0x10 [ 293.302451][ T6373] ____fput+0x25/0x30 [ 293.306620][ T6373] task_work_run+0x208/0x2b0 [ 293.311483][ T6373] exit_to_user_mode_loop+0x306/0x1b60 [ 293.317371][ T6373] ? __x64_sys_close_range+0x97/0xe0 [ 293.322972][ T6373] do_syscall_64+0x236/0xf80 [ 293.327781][ T6373] ? clear_bhb_loop+0x50/0xa0 [ 293.332676][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.338779][ T6373] RIP: 0033:0x7fc9ff59cdd9 [ 293.343381][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.363447][ T6373] RSP: 002b:00007fff71cccd38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 293.372150][ T6373] RAX: 0000000000000000 RBX: 00007fc9ff817da0 RCX: 00007fc9ff59cdd9 [ 293.380270][ T6373] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 293.388428][ T6373] RBP: 00007fc9ff817da0 R08: 00007fc9ff816038 R09: 0000000000000000 [ 293.396635][ T6373] R10: 00000000003ff158 R11: 0000000000000246 R12: 0000000000047969 [ 293.405098][ T6373] R13: 00007fc9ff81609c R14: 0000000000047737 R15: 00007fc9ff816090 [ 293.413279][ T6373] [ 293.416894][ T6373] Kernel Offset: disabled [ 293.421317][ T6373] Rebooting in 86400 seconds..