last executing test programs: 2.774282739s ago: executing program 1 (id=233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$tipc(0x1e, 0x5, 0x0) 2.601853037s ago: executing program 4 (id=238): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000002c0)={@loopback, r2}, 0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000300)={0xffffffffffffffff, 0x9, "20bced", 0x3, 0xfb}) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x4f, 0x3}}], 0x18}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) (async, rerun: 32) r8 = socket(0x10, 0x803, 0x4) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}}}, 0x24}}, 0x0) (async) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r11, 0x18d}], 0x1, 0x8001) (async, rerun: 64) close(r11) (async, rerun: 64) r12 = socket(0x40000000015, 0x5, 0x0) connect$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (rerun: 64) 2.498013757s ago: executing program 1 (id=239): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f0000000040)=0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x9, 0x4e23, 0x7fff, 0x2, 0x0, 0x20, 0x88, r1, 0xffffffffffffffff}, {0x2, 0x7fff, 0x2, 0x7fff, 0x51d, 0x1000, 0x9, 0x1}, {0x2, 0x2, 0xb2, 0xeff0}, 0xffffffff, 0x0, 0x2, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x0, 0x26, 0x7, 0x4, 0x7}}, 0xe8) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='$^,\x00', 0x200000, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x8000]}, {0xe, 0x100, 0xc, 0x8}}, 0x7, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xd}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x1, 0x7800, 0x8, 0x7, {{0x18, 0x4, 0x2, 0x3, 0x60, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0xf, 0xfb, [@rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x7b, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x1000}, {@multicast1, 0x3}, {@multicast1, 0x9}]}, @generic={0x8f, 0x7, "00f91827c6"}, @ssrr={0x89, 0x17, 0xb3, [@empty, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'tunl0\x00', r3, 0x20, 0x10, 0x8, 0x7, {{0x21, 0x4, 0x1, 0x33, 0x84, 0x67, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010102, {[@lsrr={0x83, 0x7, 0xc8, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xd, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xe8, [@remote, @rand_addr=0x64010101, @multicast2, @multicast1]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xfe, [@broadcast, @empty]}, @rr={0x7, 0x7, 0xfa, [@remote]}, @timestamp_addr={0x44, 0x2c, 0x67, 0x1, 0x0, [{@broadcast, 0xe73}, {@remote, 0x7}, {@multicast1, 0x60}, {@empty, 0x7d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) (async, rerun: 32) r5 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f00000004c0)={0x1, 0x0, 0x31, r4}, 0xc) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x4e22, 0xfffffff7, @private0, 0xed4}, {0xa, 0x6e23, 0x5, @loopback, 0x401}, 0x1, {[0xffc00000, 0xf, 0x1, 0x5, 0xfffeffff, 0x2, 0x5d9c00, 0xfffffff7]}}, 0x5c) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000940)=ANY=[@ANYRES32=r6, @ANYBLOB="ab94f3200800f3b21fb67ac9ae29dd265db362dfccda211c3c0cc6fb8dccff98b25b87f94ee9ac6c6d3c03002213efed376959b06c"]) (async, rerun: 64) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000600)={0x4, 0x18, '\x00', 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0]}) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x4, 0x3b, &(0x7f0000000700)=""/59, 0x40f00, 0x21, '\x00', r3, 0x25, r2, 0x8, &(0x7f0000000740)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x4, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000007c0)=[{0x4, 0x3, 0x8, 0xa}, {0x4, 0x2, 0xf, 0xb}, {0x1, 0x2, 0x8, 0x5}, {0x3, 0x1, 0xd}, {0x2, 0x1, 0x4, 0xc}, {0x3, 0x1, 0xb}, {0x3, 0x1, 0x10, 0x1}, {0x8, 0x2, 0xd, 0xc}, {0x1, 0x3, 0xb, 0x4}], 0x10, 0x9f4}, 0x94) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000009c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xd, r1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000a80)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000ac0)=0x0) (async) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) (async) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) sendmsg$NFC_CMD_GET_DEVICE(r7, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000018c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000325bd7000fddbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08030000cd16ba3af5a3096206ee97be6141eecef497a4f192bcb49d3ef2d3094f9424eca25573ec4e93d60949cc7f49312b5c847d3f656b85800a6825c1697e98d5cb40d40a85d791984df7a0ed6ade65f1260fec361046bbaaf0cb30035915d2cf09da64e685446a8f04790040ce7bfdd7da9bb85911faec038f8ae49aaf4d28f81ec15e5cae1f539992c101109cd452108ea41e380ebc373034c3ae5985cdccc207d67ac7335b0386d8526d7b69ca4962df3a9018e62e9794520c8894", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2b, 0x3, 0x6) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, 0x0, 0x400c844) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r12, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) 2.430251698s ago: executing program 3 (id=241): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4) connect$caif(r0, &(0x7f0000000cc0), 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.328108838s ago: executing program 4 (id=242): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r5, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000080)={0x0, r2, r1, 0x10001, 0x1, '\x00', {0x0, 0x10, 0x4, 0x4, 0x7, 0x0, 0x702, 0x1, {0x0, 0x3}, {0xffffffff, 0x2}, {0x10, 0x1000}, 0xd10c, 0x5, 0x2, 0xc1, 0x6, 0xfff8, 0x8001, 0x0, 0xffff, 0xfff, '\x00', 0x8001, 0x80, 0x1, 0xd}}) 2.236327951s ago: executing program 1 (id=244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}], 0x1}}], 0x1, 0x200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x1d, r7, 0x2, {0x0, 0x1, 0x3}, 0xfd}, 0x18, &(0x7f00000002c0)={&(0x7f0000000440)="57f1fc2b92532693fe9638958a2084e437dc7ebd16c5905674e877d19bbd449c8402f3089bd716bd7b0ff0e1ae5abde149ad3b0f91b6aa21154299ff702ab3e52b94a74c3acb0833279d6d500b5c02cf514559332e6f08d3de5117680f0e43622a0bab30e2e90bce0812438c65a7431a9233ff576c25064ac186787622dfee16f436dcf3ef0496024a6454ded6d1317ec419b0ad040ade7988fb8eaced9ccf0035d86d98644bd4270ec14a5c6598859c7146f63cf6df514b54c698b645f0cdba7e5b0b845f4902f3db5260390d617b1272e2a66423b9c984162aec1b1ed26c5ea6ca61217d2fb7cc336a38fc97e00c", 0xef}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x60}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r8, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x8a5d, 0x3, [0x3ff, 0x6, 0x9]}, &(0x7f0000000100)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r9, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xffffe262, @private1, 0x8}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}}}, &(0x7f0000000040)=0x84) 2.209767509s ago: executing program 3 (id=245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="14ea77010000000000000068c9c4b00dbbcf64b493f9e123508f9f1ad3972100"/42, @ANYRES16=r7, @ANYBLOB="010029bd7000fddbdf251a000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004880) 2.046123922s ago: executing program 4 (id=246): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async, rerun: 64) pselect6(0x28, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x9}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 64) 1.872399922s ago: executing program 1 (id=249): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r0, 0x0, 0x2, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x1, &(0x7f0000000180)='lo\x00'}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000000)={0x7, 'vxcan1\x00', {0x9}, 0x40}) 1.746876901s ago: executing program 2 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}}, 0x49080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x14}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x2a, 0xc, "102a57a4faf9193ea5d20fec3bbe0e1d11c6a732c09c9e38fe36e342242eb27efb9c753cd936"}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELOBJ={0x174, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xa1, 0x8, "dd72ff8009ac9a33f40467eb5a416142652b5a746a6fc7bfc83468fe049e03592ca8eb8d25de68c33a7f54c459f466e5194ab4c53f2f64e804a7e213275b56b5a4a4e4647364bdebe50c6d0a3a21c0b090b0765a62d7a2d902dc6cc804536ef6e390984b794cc72527eb3a9227690ccbf9b661818f2030376b0928e9eaf513bb7aa648135a4142df05e2b1b3283d5d5f0f39bf42291332b40a6315f686"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x90, 0x8, "d60198471b0573db9e00d817a362325d4ae7d0b0aa2bf09ccb95bae0ac705eea2169d65e8a95ab2f262019befa65615eb3af8e8331be99e6850f4b81093563926e097bcb08d6fb3ad070dad12990a7eece64bc9b1af02fb4ca6f1aa79246a017b27b0a55dd9fc45ba2613378452b7ef683cb3da307ee920f0341494aea6ecbb35ccb5f10e95cf39ad348bd9c"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2e4}, 0x1, 0x0, 0x0, 0x814}, 0x5) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80800) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000000c0)=""/61, &(0x7f0000000100)=0x3d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r3, r4, 0x0, 0x8) syz_emit_ethernet(0x371, &(0x7f0000000a40)={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x800, @gre={{0x20, 0x4, 0x3, 0x3, 0x35f, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @empty, {[@noop, @noop, @rr={0x7, 0x1b, 0x21, [@multicast2, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100]}, @cipso={0x86, 0x4f, 0x3, [{0x7, 0x3, '\r'}, {0x5, 0xe, "0c547d088372245be14e1fd0"}, {0x5, 0x3, "bc"}, {0x5, 0x9, "a003de6cea9486"}, {0x1, 0xf, "8f5cd17855347b65f6ed7539fd"}, {0x5, 0x4, "ed0a"}, {0x0, 0x9, "0f19ae57298269"}, {0x0, 0x6, "d171238b"}, {0x0, 0xa, "43249a0eb7b02c1e"}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x54, 0x0, [], "cbac5b14a34716beef8c2e45f0fec6cf0a0e86e76bc8f3a1e32b34096e9beabb48f5ea5a9aef13dec1db499338ee8d094bef83c8813019867288efa44fea84c1ed5e157f44e304f508a4344b508095304a013ecf"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "e3762f92e5103cf10806b4e6a166579c0b9ecbc23ecdfb2503abbb842fd44b72071b8bc231c32901df6a5c5ac6b99423650af12db0ad8c22373d13104bbd608d8a60c72a605b757ba1de450237e9f245497bafd85eba4c6d44eaee5b11664b5f5a6724fa1c73366a4a0e2347390ce865b89e9d9de015c369ee1da1a8542796723f7a9e563dcbc5699f56"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x7], "0719cab20289d28743f187929acbe2fb93931cd70002081854f8f5b31f25bf00f41591fd096f3379e5ad1a7d0c0123bf00f3fb5499904a7eafd1d8bdf51b95e82bc7d61105b1d6ef5915d070246acde8ce406eb82a23be9ce8b7408420a79ac0c47e539fad2daf4e9d5b9ac0148ed3d9b75ec862247c47facbf1771d066cba8b93a45f4d69a36bdeaa30c760f3b38528ebd71f31f04014af76a76c8004552169c45202329ef721d28e61c246957a3d40f5b59e3b3fd22871729a92cb7dde57af19be8d389ee045fecec63a7cba73d374f552c046886c801b78c4428f5b8a1380ecbdb10c5a86576f125811dbf4"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x81, 0x0, 0x0, 0x2}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x2, {0x2, 0x3, 0x3, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "edef896876a438f8f68ad3f34faf234a97b6f02dc8377e9473a8368cdf437a38f449d12a91c9f42a75ab64e8bc295d3728a0c6208b15ed455693d894b71435a19f3da1a6e0c7e2aefb4d2a0baad02606f28f4346870e12d9f22fd61baa19ede6bab23b4a9bc92da312ac83d6ff95a6b97cc226f3c9dbe1315865f5657c41319a49d443979968bbd0b99e6554694d214fce5970811b8c22a6c67b74c4347fa325f29c82b3563e021ae566b594c512883dc9be39ae31584b3ab25e4521478271687f7f7502f8d1a7311d4c059ee106"}}}}}}, &(0x7f0000000200)={0x1, 0x2, [0x72f, 0xc0a, 0x444, 0xbe9]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 1.740408413s ago: executing program 4 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x8, 0x9, 0x0, 0x201, 0x7fffffff}, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r8}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={r8, 0x2}, &(0x7f0000000480)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0xfffff000}, 0x20004000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00 \x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000ffdbdf2507000000080001003e00000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000000590000000400cc000a00180003030303030300000800050004000000"], 0x48}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f913}, 0x2404c840) sendmsg$NFT_BATCH(r10, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a7c000000050a01080000000000000000950000074c000480080002405783027e0800024037d3f2de08000240595f0a4908000140000000040800024009315932080001400000000408000240033d8201080002406f01013208000140000000011a000c0066b68542ee086d93c8683f2cd9be62d85e2a0dd638a5000020000000080a01080000000000000000050000040900010073797a3000000000140000001100010000000000000000000700000a"], 0xc4}, 0x1, 0x0, 0x0, 0x41}, 0x800) 1.585376484s ago: executing program 2 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0xf, 0x803, 0x1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x40, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40084}, 0x20000841) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.449810413s ago: executing program 3 (id=255): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYRES32=r1], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) (rerun: 64) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f00000000c0)={0x3, @default, 0xee01}) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x201, 0x70bd28, 0x25dfdbfe, {0x2, 0x8, 0x43}}, 0x18}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)={0x14, 0x1, 0x9, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x40d0) 1.34694515s ago: executing program 2 (id=256): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES16=r0, @ANYRESOCT], 0x50}}, 0x0) 1.270863302s ago: executing program 0 (id=257): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 1.150113431s ago: executing program 2 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000180140003000000000000000000010000000000000004000200040001"], 0x40}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500e2d5d762006110d97f54eb149bcee87934000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r8, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r9, 0x89ee, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x2, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x1000c844) 1.078028957s ago: executing program 0 (id=259): r0 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000540)=""/228, 0xe4}], 0x7, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}]}]}, 0x2c}}, 0x0) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x0) poll(&(0x7f0000000040)=[{r1, 0x82}], 0x1, 0x800) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) socket$netlink(0x10, 0x3, 0x0) (async) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000540)=""/228, 0xe4}], 0x7, 0x3, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}]}]}, 0x2c}}, 0x0) (async) socket(0x28, 0x801, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r1, 0x0) (async) poll(&(0x7f0000000040)=[{r1, 0x82}], 0x1, 0x800) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) (async) 1.037100138s ago: executing program 3 (id=260): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000580)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r5, 0x300, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r6}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x692a, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x3, 0x2, 0x4, 0x8, 0xffffffffffffffff, 0x10}, @call={0x85, 0x0, 0x0, 0x11}, @alu={0x4, 0x1, 0x0, 0x5, 0x5488c30830afea66, 0x18, 0xffffffffffffffff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000740)='syzkaller\x00', 0x156, 0x44, &(0x7f0000000780)=""/68, 0xc651228351119a64, 0x40, '\x00', r3, 0x19, r4, 0x8, &(0x7f0000000880)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x1, 0x5, 0xe2c5}, 0x10, 0x33e, r5, 0x8, &(0x7f0000000980)=[r6, r7, r8], &(0x7f00000009c0)=[{0x1, 0x2, 0xd, 0x7}, {0x3, 0x5, 0xb, 0x6}, {0x0, 0x3, 0xd, 0x7}, {0x2, 0x3, 0xb, 0x1}, {0x3, 0x3, 0x3, 0x1}, {0x3, 0x4, 0x2, 0xa}, {0x1, 0x4, 0x0, 0x5}, {0x4, 0x4, 0xd, 0x6}], 0x10, 0x7}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r11 = accept4(r10, 0x0, 0x0, 0x400) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xa, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r13) sendmsg$IEEE802154_ASSOCIATE_RESP(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) close(r0) 838.97544ms ago: executing program 1 (id=261): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x4, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) close(r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 838.395803ms ago: executing program 0 (id=262): r0 = socket$inet6(0xa, 0x6, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f00000011c0)={'ip6_vti0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'pim6reg0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x28, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff008}, {0x6}]}, 0x10) 771.76867ms ago: executing program 4 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r2, 0x25, 0x8, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) (async) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0xc, 0x4, 0x5]}, &(0x7f0000000240)=0x44) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x28}}, 0x8040) 699.896019ms ago: executing program 2 (id=264): ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c100000000000000a0000", 0x58}], 0x1) 414.433198ms ago: executing program 0 (id=265): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000008b"], 0x0, 0x32, 0x0, 0x0, 0xfffffffe}, 0x11) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) 411.923391ms ago: executing program 2 (id=266): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000240)="e1", 0x1, 0x7fffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "853c1c9341b05be66feefda4e4b7"}}]}, 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x401c5820, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r4, &(0x7f0000000540)=""/4096, 0x1000) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) 401.937419ms ago: executing program 3 (id=267): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x59cf4198, 0x6, 0x1, 0x4, 0x4, 0x0, [{0x2, 0x5, 0x7, '\x00', 0x404}, {0x4, 0x7fffffffffffffff, 0x1, '\x00', 0x1500}, {0x880, 0x81, 0x0, '\x00', 0x80}, {0x0, 0x4, 0x7, '\x00', 0x88}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 255.413067ms ago: executing program 4 (id=268): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002e00)=[{{&(0x7f0000000640)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=[@hoplimit={{0x14, 0x29, 0x34, 0x1ff}}], 0x18}}], 0x1, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 182.163619ms ago: executing program 1 (id=269): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000008c07213238b040494dfb3d7971840b3edeeaf050c9fcfcb6ab906874f03cce56fe9650183f6ce5fbe21d67a35b20", @ANYRES16=r2, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r3 = accept4(r0, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010400076bb0a49187f33ed9f1297800"/32, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0002000055b9156e08001f0009000000"], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x6, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x1, 0xf}, {0x0, 0xffe0}, {0x7, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x410}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400000021000100005b020c9a051fea310000000000000002800017004e20000000000000000000"], 0x24}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000180)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) 180.88961ms ago: executing program 0 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 140.163128ms ago: executing program 3 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 0s ago: executing program 0 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) listen(r2, 0x4) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="ffff"], 0x40}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000040), 0x12) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000080), 0x12) close(r7) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 82.403349][ T5810] cgroup: Unknown subsys name 'net' [ 82.555168][ T5810] cgroup: Unknown subsys name 'cpuset' [ 82.564926][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.204242][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.168194][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.177114][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.185298][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.193615][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.202451][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.382822][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.393938][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.404242][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.412880][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.421181][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.429561][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.438528][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.446545][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.454168][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.474691][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.483900][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.492901][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.493245][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.508658][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.512392][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.516451][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.539631][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.542034][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.561678][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.570080][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.665081][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.867764][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.875988][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.883657][ T5823] bridge_slave_0: entered allmulticast mode [ 88.891204][ T5823] bridge_slave_0: entered promiscuous mode [ 88.930276][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.937667][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.945889][ T5823] bridge_slave_1: entered allmulticast mode [ 88.954927][ T5823] bridge_slave_1: entered promiscuous mode [ 89.031192][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.062628][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.145772][ T5823] team0: Port device team_slave_0 added [ 89.155125][ T5823] team0: Port device team_slave_1 added [ 89.254104][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.261911][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.290747][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.334720][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.347393][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.373880][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.463214][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.553764][ T5823] hsr_slave_0: entered promiscuous mode [ 89.560639][ T5823] hsr_slave_1: entered promiscuous mode [ 89.614758][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.630747][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.755268][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.762971][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.770447][ T5829] bridge_slave_0: entered allmulticast mode [ 89.778130][ T5829] bridge_slave_0: entered promiscuous mode [ 89.786201][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.793719][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.801740][ T5829] bridge_slave_1: entered allmulticast mode [ 89.808996][ T5829] bridge_slave_1: entered promiscuous mode [ 89.840408][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.950629][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.005601][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.038934][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.047296][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.055385][ T5830] bridge_slave_0: entered allmulticast mode [ 90.065494][ T5830] bridge_slave_0: entered promiscuous mode [ 90.113799][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.121154][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.129285][ T5830] bridge_slave_1: entered allmulticast mode [ 90.136661][ T5830] bridge_slave_1: entered promiscuous mode [ 90.161408][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.168741][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.176508][ T5834] bridge_slave_0: entered allmulticast mode [ 90.183883][ T5834] bridge_slave_0: entered promiscuous mode [ 90.216033][ T5829] team0: Port device team_slave_0 added [ 90.233494][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.240931][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.249061][ T5834] bridge_slave_1: entered allmulticast mode [ 90.256508][ T5834] bridge_slave_1: entered promiscuous mode [ 90.288197][ T5829] team0: Port device team_slave_1 added [ 90.295095][ T5832] Bluetooth: hci0: command tx timeout [ 90.319792][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.327238][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.334732][ T5828] bridge_slave_0: entered allmulticast mode [ 90.342417][ T5828] bridge_slave_0: entered promiscuous mode [ 90.352482][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.359747][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.367444][ T5828] bridge_slave_1: entered allmulticast mode [ 90.375555][ T5828] bridge_slave_1: entered promiscuous mode [ 90.385755][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.438092][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.481222][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.519419][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.527303][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.554497][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.568902][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.581087][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.593391][ T5830] team0: Port device team_slave_0 added [ 90.607175][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.614698][ T5832] Bluetooth: hci3: command tx timeout [ 90.615123][ T5837] Bluetooth: hci1: command tx timeout [ 90.622056][ T5845] Bluetooth: hci4: command tx timeout [ 90.628038][ T5843] Bluetooth: hci2: command tx timeout [ 90.640618][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.670015][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.695748][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.707801][ T5830] team0: Port device team_slave_1 added [ 90.777782][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.785737][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.818062][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.834330][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.842774][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.877080][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.891285][ T5834] team0: Port device team_slave_0 added [ 90.912469][ T5828] team0: Port device team_slave_0 added [ 90.928761][ T5834] team0: Port device team_slave_1 added [ 90.946225][ T5828] team0: Port device team_slave_1 added [ 91.020527][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.027833][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.054968][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.084325][ T5829] hsr_slave_0: entered promiscuous mode [ 91.091075][ T5829] hsr_slave_1: entered promiscuous mode [ 91.097961][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 91.103954][ T5829] Cannot create hsr debugfs directory [ 91.118214][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.125567][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.152130][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.164508][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.172814][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.200065][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.236594][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.244536][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.272197][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.309419][ T5830] hsr_slave_0: entered promiscuous mode [ 91.316673][ T5830] hsr_slave_1: entered promiscuous mode [ 91.323102][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 91.329215][ T5830] Cannot create hsr debugfs directory [ 91.376181][ T5834] hsr_slave_0: entered promiscuous mode [ 91.382620][ T5834] hsr_slave_1: entered promiscuous mode [ 91.388842][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 91.395076][ T5834] Cannot create hsr debugfs directory [ 91.436251][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.484347][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.537023][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.563793][ T5828] hsr_slave_0: entered promiscuous mode [ 91.570198][ T5828] hsr_slave_1: entered promiscuous mode [ 91.577182][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 91.583120][ T5828] Cannot create hsr debugfs directory [ 91.602235][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.021327][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.034623][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.046718][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.058463][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.146023][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.156582][ T1208] cfg80211: failed to load regulatory.db [ 92.170387][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.183807][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.197079][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.319271][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.338680][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.371934][ T5843] Bluetooth: hci0: command tx timeout [ 92.382594][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.389502][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.400097][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.483370][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.496906][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.508745][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.520238][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.549016][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.618693][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.626105][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.640223][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.664846][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.672152][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.695578][ T5843] Bluetooth: hci3: command tx timeout [ 92.695586][ T5837] Bluetooth: hci4: command tx timeout [ 92.702431][ T5837] Bluetooth: hci2: command tx timeout [ 92.708609][ T5832] Bluetooth: hci1: command tx timeout [ 92.728665][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.757249][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.784012][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.791304][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.831094][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.838383][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.883882][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.915664][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.944921][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.952879][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.977585][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.985274][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.055698][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.116009][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.158942][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.166596][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.191082][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.210286][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.228860][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.236617][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.286951][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.294647][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.368401][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.375810][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.460593][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.491035][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.668264][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.716141][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.768319][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.961365][ T5830] veth0_vlan: entered promiscuous mode [ 93.986237][ T5829] veth0_vlan: entered promiscuous mode [ 94.016686][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.046930][ T5830] veth1_vlan: entered promiscuous mode [ 94.056817][ T5829] veth1_vlan: entered promiscuous mode [ 94.070272][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.078150][ T5823] veth0_vlan: entered promiscuous mode [ 94.100675][ T5823] veth1_vlan: entered promiscuous mode [ 94.150855][ T5830] veth0_macvtap: entered promiscuous mode [ 94.171122][ T5830] veth1_macvtap: entered promiscuous mode [ 94.245468][ T5829] veth0_macvtap: entered promiscuous mode [ 94.270059][ T5823] veth0_macvtap: entered promiscuous mode [ 94.297327][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.323428][ T5829] veth1_macvtap: entered promiscuous mode [ 94.330745][ T5823] veth1_macvtap: entered promiscuous mode [ 94.346858][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.356003][ T5834] veth0_vlan: entered promiscuous mode [ 94.389505][ T3536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.410715][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.442254][ T3536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.453163][ T5843] Bluetooth: hci0: command tx timeout [ 94.493519][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.505791][ T3536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.517420][ T3536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.547253][ T5834] veth1_vlan: entered promiscuous mode [ 94.559850][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.585176][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.595402][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.638313][ T1114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.650425][ T1114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.686889][ T1114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.698565][ T1114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.719357][ T1114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.730623][ T1114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.746282][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.767434][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.773285][ T1114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.778282][ T5843] Bluetooth: hci3: command tx timeout [ 94.790043][ T5832] Bluetooth: hci1: command tx timeout [ 94.790609][ T5837] Bluetooth: hci2: command tx timeout [ 94.796689][ T5832] Bluetooth: hci4: command tx timeout [ 94.875096][ T5828] veth0_vlan: entered promiscuous mode [ 94.883007][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.891112][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.933562][ T5828] veth1_vlan: entered promiscuous mode [ 94.940938][ T5834] veth0_macvtap: entered promiscuous mode [ 95.008791][ T5834] veth1_macvtap: entered promiscuous mode [ 95.023027][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.046654][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.058858][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.116125][ T5828] veth0_macvtap: entered promiscuous mode [ 95.144789][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.159007][ T5828] veth1_macvtap: entered promiscuous mode [ 95.167854][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.192925][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.210347][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.271425][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.303227][ T3536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.313574][ T3536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.335594][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.366753][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.370802][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.376346][ T3536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.394054][ T3536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.449144][ T3536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.500709][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.515538][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.525818][ T3536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.607652][ T3536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.652015][ T3536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.753063][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.851898][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.882091][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.017983][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.029278][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.076211][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.100514][ T5962] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 96.114160][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.139468][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.177923][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.405734][ T5966] netlink: 'syz.1.10': attribute type 12 has an invalid length. [ 96.422107][ T5966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.452390][ T5973] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.472803][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 96.533497][ T5832] Bluetooth: hci0: command tx timeout [ 96.621990][ T5973] bond1: Invalid ad_actor_system MAC address. [ 96.644412][ T5973] bond1: option ad_actor_system: invalid value (1) [ 96.685101][ T5973] bond1 (unregistering): Released all slaves [ 96.777876][ T5994] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.792730][ T5994] xt_SECMARK: invalid mode: 9 [ 96.852726][ T5843] Bluetooth: hci3: command tx timeout [ 96.855778][ T5845] Bluetooth: hci2: command tx timeout [ 96.858421][ T5832] Bluetooth: hci4: command tx timeout [ 96.869983][ T5843] Bluetooth: hci1: command tx timeout [ 97.007278][ T5988] syzkaller0: entered promiscuous mode [ 97.031620][ T5988] syzkaller0: entered allmulticast mode [ 97.055211][ T5991] syzkaller0: entered promiscuous mode [ 97.060891][ T5991] syzkaller0: entered allmulticast mode [ 97.070662][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.110647][ T6004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.143460][ T6010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18'. [ 98.271604][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.344306][ T6017] syzkaller0: entered promiscuous mode [ 98.349863][ T6017] syzkaller0: entered allmulticast mode [ 98.404416][ T6025] macvtap1: entered promiscuous mode [ 98.430968][ T6025] macvtap1: entered allmulticast mode [ 98.445027][ T6025] veth1_vlan: entered allmulticast mode [ 98.486898][ T6020] macvtap2: entered promiscuous mode [ 98.492997][ T6020] macvtap2: entered allmulticast mode [ 98.498069][ T6025] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 98.511160][ T6025] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22'. [ 98.531174][ T6029] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 98.539296][ T6029] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22'. [ 98.658261][ T6035] xt_SECMARK: invalid mode: 9 [ 99.094336][ T6056] netlink: 88 bytes leftover after parsing attributes in process `syz.3.32'. [ 99.095756][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 99.154375][ T6056] netlink: 76 bytes leftover after parsing attributes in process `syz.3.32'. [ 99.577285][ T6089] netlink: 'syz.0.37': attribute type 2 has an invalid length. [ 99.840575][ T6095] netlink: 'syz.1.43': attribute type 10 has an invalid length. [ 99.894567][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.920410][ T6095] bridge_slave_1: left allmulticast mode [ 99.943446][ T6095] bridge_slave_1: left promiscuous mode [ 99.952951][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.987543][ T6095] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 100.112414][ T6097] syzkaller0: entered promiscuous mode [ 100.117954][ T6097] syzkaller0: entered allmulticast mode [ 100.241706][ T6122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.544705][ T6136] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 101.591655][ T6136] __nla_validate_parse: 1 callbacks suppressed [ 101.591678][ T6136] netlink: 200 bytes leftover after parsing attributes in process `syz.1.52'. [ 102.184559][ T6165] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 102.353203][ T6169] ip6t_srh: unknown srh invflags 4000 [ 102.514483][ T6179] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.602932][ T6179] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.115905][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 103.268163][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'. [ 103.318962][ T6201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.399289][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 103.420685][ T6207] Zero length message leads to an empty skb [ 103.858402][ T6227] : entered promiscuous mode [ 103.870208][ T6225] x_tables: duplicate underflow at hook 3 [ 103.877946][ T6225] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 103.889498][ T6225] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 103.926209][ T6228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.084396][ T6236] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 104.173554][ T6243] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 104.189319][ T6243] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 104.195645][ T6237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.447513][ T6248] netlink: 256 bytes leftover after parsing attributes in process `syz.0.89'. [ 104.644173][ T6254] bond1: (slave bond_slave_1): Device is not our slave [ 104.651604][ T6254] bond1: option active_slave: invalid value (bond_slave_1) [ 104.660759][ T6254] bond1 (unregistering): Released all slaves [ 104.808542][ T6257] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 104.823692][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.93'. [ 104.843948][ T6257] netlink: 256 bytes leftover after parsing attributes in process `syz.0.93'. [ 104.983774][ T6266] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 105.009917][ T6266] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 105.020658][ T6244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.265508][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 105.334513][ T6283] syzkaller0: entered promiscuous mode [ 105.340438][ T6283] syzkaller0: entered allmulticast mode [ 105.357898][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 105.473267][ T6289] bond1: (slave bond_slave_1): Device is not our slave [ 105.480214][ T6289] bond1: option active_slave: invalid value (bond_slave_1) [ 105.496780][ T6289] bond1 (unregistering): Released all slaves [ 105.536380][ T6292] netlink: 36 bytes leftover after parsing attributes in process `syz.0.105'. [ 105.615292][ T6295] netlink: 'syz.0.106': attribute type 21 has an invalid length. [ 105.625080][ T6295] netlink: 'syz.0.106': attribute type 6 has an invalid length. [ 105.986007][ T6312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.195976][ T6322] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 106.249360][ T6325] macsec1: entered promiscuous mode [ 106.291664][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.295435][ T6322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.402978][ T6329] bond1: (slave bond_slave_1): Device is not our slave [ 106.423952][ T6329] bond1: option active_slave: invalid value (bond_slave_1) [ 106.438025][ T6329] bond1 (unregistering): Released all slaves [ 106.933853][ T6368] __nla_validate_parse: 3 callbacks suppressed [ 106.933875][ T6368] netlink: 240 bytes leftover after parsing attributes in process `syz.1.126'. [ 107.064788][ T6373] netlink: 'syz.3.129': attribute type 13 has an invalid length. [ 107.071589][ T6371] syz.0.128 uses obsolete (PF_INET,SOCK_PACKET) [ 107.073489][ T6373] netlink: 116 bytes leftover after parsing attributes in process `syz.3.129'. [ 107.163206][ T6377] bond2: (slave bond_slave_1): Device is not our slave [ 107.170437][ T6377] bond2: option active_slave: invalid value (bond_slave_1) [ 107.183305][ T6377] bond2 (unregistering): Released all slaves [ 107.452619][ T6391] netlink: 'syz.3.134': attribute type 13 has an invalid length. [ 107.463717][ T6391] netlink: 'syz.3.134': attribute type 58 has an invalid length. [ 107.501817][ T6391] netlink: 152 bytes leftover after parsing attributes in process `syz.3.134'. [ 107.770820][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 107.933678][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.140'. [ 108.205344][ T6415] netlink: 256 bytes leftover after parsing attributes in process `syz.0.141'. [ 108.270991][ T6422] netlink: 144 bytes leftover after parsing attributes in process `syz.3.144'. [ 108.317151][ T6425] xt_SECMARK: invalid mode: 9 [ 109.324020][ T6476] netlink: 'syz.4.159': attribute type 10 has an invalid length. [ 109.360826][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.382586][ T6476] bridge_slave_1: left allmulticast mode [ 109.419870][ T6476] bridge_slave_1: left promiscuous mode [ 109.436963][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.453853][ T6476] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 109.484553][ T6479] dvmrp0: entered allmulticast mode [ 109.779930][ T6499] syzkaller0: entered promiscuous mode [ 109.815430][ T6499] syzkaller0: entered allmulticast mode [ 109.827520][ T6501] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 109.906697][ T6505] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 110.115742][ T6501] batman_adv: batadv0: Adding interface: netdevsim0 [ 110.123194][ T6501] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.150122][ T6501] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 110.520763][ T6522] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 110.892459][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 110.965671][ T6558] RDS: rds_bind could not find a transport for ::ffff:0.0.4.1, load rds_tcp or rds_rdma? [ 111.031210][ T6562] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20004 [ 111.059420][ T6554] bond2: entered promiscuous mode [ 111.082466][ T6554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.168308][ T6564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.211892][ T6564] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 111.228283][ T6564] bond2: (slave sit1): Error -95 calling set_mac_address [ 111.252475][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 111.262932][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 111.481344][ T6583] xt_SECMARK: invalid mode: 9 [ 111.644835][ T6589] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 111.697058][ T5838] IPVS: starting estimator thread 0... [ 111.801888][ T6594] IPVS: using max 32 ests per chain, 76800 per kthread [ 111.990422][ T6605] __nla_validate_parse: 6 callbacks suppressed [ 111.990445][ T6605] netlink: 156 bytes leftover after parsing attributes in process `syz.3.192'. [ 112.037710][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.192'. [ 112.146431][ T6611] IPv6: sit1: Disabled Multicast RS [ 112.167638][ T6611] sit1: entered allmulticast mode [ 112.302567][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.198'. [ 112.638469][ T6645] netlink: 9 bytes leftover after parsing attributes in process `syz.2.202'. [ 113.051349][ T6662] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 113.096444][ T6662] netlink: 'syz.3.208': attribute type 3 has an invalid length. [ 113.104819][ T6662] netlink: 224 bytes leftover after parsing attributes in process `syz.3.208'. [ 113.199868][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 113.219154][ T6670] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.309743][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 113.321790][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 113.406800][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 113.426831][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 113.556953][ T6687] vlan2: entered promiscuous mode [ 113.581350][ T6687] bridge0: entered promiscuous mode [ 113.645669][ T6695] netlink: 'syz.3.220': attribute type 4 has an invalid length. [ 113.686928][ T6695] `: renamed from bond0 (while UP) [ 113.958941][ T6703] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 114.047082][ T6703] bond0: entered promiscuous mode [ 114.054328][ T6703] bond0: entered allmulticast mode [ 114.062081][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.435670][ T6728] netlink: 'syz.1.233': attribute type 4 has an invalid length. [ 114.541837][ T6737] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 114.708611][ T6749] netlink: 'syz.2.240': attribute type 11 has an invalid length. [ 114.750042][ T6749] netlink: 'syz.2.240': attribute type 11 has an invalid length. [ 116.317760][ T6828] xt_addrtype: ipv6 does not support BROADCAST matching [ 116.425223][ T6832] gretap0: entered promiscuous mode [ 116.560275][ T6832] gretap0: left promiscuous mode [ 116.673159][ T6832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.009488][ T6861] netlink: 'syz.0.270': attribute type 12 has an invalid length. [ 117.072843][ T6859] syzkaller0: entered promiscuous mode [ 117.091994][ T6859] syzkaller0: entered allmulticast mode [ 117.356113][ T6877] ------------[ cut here ]------------ [ 117.362055][ T6877] msk->pm.local_addr_used == 0 [ 117.362074][ T6877] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb1/0x1430, CPU#1: syz.0.272/6877 [ 117.378224][ T6877] Modules linked in: [ 117.382499][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.0.272 Not tainted syzkaller #0 PREEMPT(full) [ 117.392057][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.402992][ T6877] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 117.409589][ T6877] Code: 01 00 00 49 89 c6 e8 5e cf 36 f6 e9 28 fb ff ff e8 54 cf 36 f6 48 89 df be 03 00 00 00 e8 c7 70 17 f9 eb a4 e8 40 cf 36 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 117.429436][ T6877] RSP: 0018:ffffc9001bb47160 EFLAGS: 00010283 [ 117.435680][ T6877] RAX: ffffffff8b8d6b90 RBX: 0000000000000000 RCX: 0000000000080000 [ 117.443991][ T6877] RDX: ffffc9000c3e2000 RSI: 0000000000001037 RDI: 0000000000001038 [ 117.452040][ T6877] RBP: ffffc9001bb473b0 R08: ffff888033e3a447 R09: 1ffff110067c7488 [ 117.460044][ T6877] R10: dffffc0000000000 R11: ffffed10067c7489 R12: 1ffff110067c7487 [ 117.468127][ T6877] R13: ffff88807872c700 R14: ffff888033e39980 R15: ffff888033e3a438 [ 117.476223][ T6877] FS: 00007f46b74816c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 117.485323][ T6877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.492148][ T6877] CR2: 000020000039e000 CR3: 000000007af3a000 CR4: 00000000003526f0 [ 117.500443][ T6877] Call Trace: [ 117.504037][ T6877] [ 117.507025][ T6877] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 117.513289][ T6877] ? rcu_is_watching+0x15/0xb0 [ 117.518202][ T6877] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 117.524874][ T6877] genl_family_rcv_msg_doit+0x22a/0x330 [ 117.530559][ T6877] ? __asan_memcpy+0x40/0x70 [ 117.535338][ T6877] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.541606][ T6877] ? bpf_lsm_capable+0x9/0x20 [ 117.546329][ T6877] ? security_capable+0x7e/0x2c0 [ 117.551416][ T6877] genl_rcv_msg+0x61c/0x7a0 [ 117.556140][ T6877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.561215][ T6877] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 117.567539][ T6877] ? __pfx_ref_tracker_free+0x10/0x10 [ 117.573287][ T6877] ? __skb_clone+0x63/0x7a0 [ 117.578040][ T6877] netlink_rcv_skb+0x232/0x4b0 [ 117.582929][ T6877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.588020][ T6877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.593419][ T6877] ? genl_rcv+0x19/0x40 [ 117.597831][ T6877] ? down_read+0x272/0x2e0 [ 117.602483][ T6877] ? genl_rcv+0xd/0x40 [ 117.606603][ T6877] genl_rcv+0x28/0x40 [ 117.610634][ T6877] netlink_unicast+0x80f/0x9b0 [ 117.615613][ T6877] ? __pfx_netlink_unicast+0x10/0x10 [ 117.621137][ T6877] ? netlink_sendmsg+0x650/0xb40 [ 117.626249][ T6877] ? skb_put+0x11b/0x210 [ 117.630589][ T6877] netlink_sendmsg+0x813/0xb40 [ 117.635541][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.640890][ T6877] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.646047][ T6877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.651613][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.657040][ T6877] ____sys_sendmsg+0xa68/0xad0 [ 117.661895][ T6877] ? __might_fault+0xaf/0x130 [ 117.666794][ T6877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.672190][ T6877] ? import_iovec+0x73/0xa0 [ 117.676743][ T6877] ___sys_sendmsg+0x2a5/0x360 [ 117.681506][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 117.686502][ T6877] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.691825][ T6877] ? futex_wake+0x4ac/0x580 [ 117.696590][ T6877] ? __fget_files+0x2a/0x420 [ 117.701308][ T6877] ? __fget_files+0x3a0/0x420 [ 117.706079][ T6877] __x64_sys_sendmsg+0x1bd/0x2a0 [ 117.711151][ T6877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.716731][ T6877] ? rcu_is_watching+0x15/0xb0 [ 117.721692][ T6877] do_syscall_64+0x14d/0xf80 [ 117.726413][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.732587][ T6877] ? trace_irq_disable+0x37/0x100 [ 117.737930][ T6877] ? clear_bhb_loop+0x40/0x90 [ 117.743001][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.749038][ T6877] RIP: 0033:0x7f46b659c629 [ 117.753647][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.773725][ T6877] RSP: 002b:00007f46b7481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.782339][ T6877] RAX: ffffffffffffffda RBX: 00007f46b6815fa0 RCX: 00007f46b659c629 [ 117.790616][ T6877] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b [ 117.798683][ T6877] RBP: 00007f46b6632b39 R08: 0000000000000000 R09: 0000000000000000 [ 117.806763][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.815289][ T6877] R13: 00007f46b6816038 R14: 00007f46b6815fa0 R15: 00007ffc263049e8 [ 117.823640][ T6877] [ 117.826809][ T6877] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.834664][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.0.272 Not tainted syzkaller #0 PREEMPT(full) [ 117.843909][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.853987][ T6877] Call Trace: [ 117.857302][ T6877] [ 117.860265][ T6877] vpanic+0x1e0/0x670 [ 117.864279][ T6877] panic+0xc5/0xd0 [ 117.868214][ T6877] ? __pfx_panic+0x10/0x10 [ 117.872660][ T6877] __warn+0x315/0x4a0 [ 117.876648][ T6877] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 117.882558][ T6877] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 117.888549][ T6877] __report_bug+0x29a/0x540 [ 117.893221][ T6877] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 117.899382][ T6877] ? __pfx___report_bug+0x10/0x10 [ 117.904506][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 117.909456][ T6877] ? reacquire_held_locks+0x104/0x190 [ 117.914894][ T6877] ? __lock_sock_fast+0x45/0xe0 [ 117.919761][ T6877] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 117.925759][ T6877] report_bug+0x16a/0x220 [ 117.930183][ T6877] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 117.936084][ T6877] ? mptcp_pm_nl_del_addr_doit+0xfb3/0x1430 [ 117.941989][ T6877] handle_bug+0x98/0x200 [ 117.946247][ T6877] exc_invalid_op+0x1a/0x50 [ 117.950762][ T6877] asm_exc_invalid_op+0x1a/0x20 [ 117.955617][ T6877] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 117.962307][ T6877] Code: 01 00 00 49 89 c6 e8 5e cf 36 f6 e9 28 fb ff ff e8 54 cf 36 f6 48 89 df be 03 00 00 00 e8 c7 70 17 f9 eb a4 e8 40 cf 36 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 117.982446][ T6877] RSP: 0018:ffffc9001bb47160 EFLAGS: 00010283 [ 117.988520][ T6877] RAX: ffffffff8b8d6b90 RBX: 0000000000000000 RCX: 0000000000080000 [ 117.996522][ T6877] RDX: ffffc9000c3e2000 RSI: 0000000000001037 RDI: 0000000000001038 [ 118.004507][ T6877] RBP: ffffc9001bb473b0 R08: ffff888033e3a447 R09: 1ffff110067c7488 [ 118.012488][ T6877] R10: dffffc0000000000 R11: ffffed10067c7489 R12: 1ffff110067c7487 [ 118.020461][ T6877] R13: ffff88807872c700 R14: ffff888033e39980 R15: ffff888033e3a438 [ 118.028443][ T6877] ? mptcp_pm_nl_del_addr_doit+0xfb0/0x1430 [ 118.034375][ T6877] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 118.040910][ T6877] ? rcu_is_watching+0x15/0xb0 [ 118.045872][ T6877] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 118.052219][ T6877] genl_family_rcv_msg_doit+0x22a/0x330 [ 118.057793][ T6877] ? __asan_memcpy+0x40/0x70 [ 118.063088][ T6877] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 118.069260][ T6877] ? bpf_lsm_capable+0x9/0x20 [ 118.073952][ T6877] ? security_capable+0x7e/0x2c0 [ 118.078992][ T6877] genl_rcv_msg+0x61c/0x7a0 [ 118.083509][ T6877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.088762][ T6877] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 118.095109][ T6877] ? __pfx_ref_tracker_free+0x10/0x10 [ 118.100492][ T6877] ? __skb_clone+0x63/0x7a0 [ 118.105004][ T6877] netlink_rcv_skb+0x232/0x4b0 [ 118.109869][ T6877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.114910][ T6877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.120194][ T6877] ? genl_rcv+0x19/0x40 [ 118.124459][ T6877] ? down_read+0x272/0x2e0 [ 118.128880][ T6877] ? genl_rcv+0xd/0x40 [ 118.132969][ T6877] genl_rcv+0x28/0x40 [ 118.137223][ T6877] netlink_unicast+0x80f/0x9b0 [ 118.142101][ T6877] ? __pfx_netlink_unicast+0x10/0x10 [ 118.147480][ T6877] ? netlink_sendmsg+0x650/0xb40 [ 118.152417][ T6877] ? skb_put+0x11b/0x210 [ 118.156771][ T6877] netlink_sendmsg+0x813/0xb40 [ 118.161666][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.166972][ T6877] ? aa_sock_msg_perm+0xf1/0x1b0 [ 118.172044][ T6877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.177445][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.182944][ T6877] ____sys_sendmsg+0xa68/0xad0 [ 118.187740][ T6877] ? __might_fault+0xaf/0x130 [ 118.192522][ T6877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.197830][ T6877] ? import_iovec+0x73/0xa0 [ 118.202339][ T6877] ___sys_sendmsg+0x2a5/0x360 [ 118.207205][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 118.212253][ T6877] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.217726][ T6877] ? futex_wake+0x4ac/0x580 [ 118.222364][ T6877] ? __fget_files+0x2a/0x420 [ 118.227010][ T6877] ? __fget_files+0x3a0/0x420 [ 118.231916][ T6877] __x64_sys_sendmsg+0x1bd/0x2a0 [ 118.236885][ T6877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.242377][ T6877] ? rcu_is_watching+0x15/0xb0 [ 118.247247][ T6877] do_syscall_64+0x14d/0xf80 [ 118.251874][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.257961][ T6877] ? trace_irq_disable+0x37/0x100 [ 118.263020][ T6877] ? clear_bhb_loop+0x40/0x90 [ 118.267891][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.274046][ T6877] RIP: 0033:0x7f46b659c629 [ 118.278478][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.298350][ T6877] RSP: 002b:00007f46b7481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.306805][ T6877] RAX: ffffffffffffffda RBX: 00007f46b6815fa0 RCX: 00007f46b659c629 [ 118.314887][ T6877] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b [ 118.323124][ T6877] RBP: 00007f46b6632b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.331361][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.339522][ T6877] R13: 00007f46b6816038 R14: 00007f46b6815fa0 R15: 00007ffc263049e8 [ 118.347623][ T6877] [ 118.351162][ T6877] Kernel Offset: disabled [ 118.355481][ T6877] Rebooting in 86400 seconds..