last executing test programs: 1m21.992760806s ago: executing program 1 (id=93): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413b8840081915130000000000010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x80000000000000a, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000580)=ANY=[], 0x0) socket$unix(0x1, 0x5, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m15.614974577s ago: executing program 1 (id=103): ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000002700)={'pimreg1\x00', @ifru_ivalue}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf) r5 = epoll_create(0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x2000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000fedbdf250800000008000300", @ANYRES32=r3, @ANYBLOB="5400308005000200090000000c00018008000100"], 0x70}}, 0x8004014) ioctl$sock_ifreq(r0, 0xa0, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_ivalue=0x4}) 1m10.139696711s ago: executing program 1 (id=114): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, 0x0, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4850) sendmsg$NL80211_CMD_GET_REG(r2, 0x0, 0x50000) 1m6.205519572s ago: executing program 1 (id=121): socket(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1m2.953961256s ago: executing program 1 (id=126): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x1, 0xffffffff, 0x1400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0x11}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) 59.134032889s ago: executing program 1 (id=130): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x773c1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x7ffe, 0x80) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r1, r0, 0x0, 0xf03a0005) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x80000001, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) 45.125447878s ago: executing program 4 (id=150): r0 = socket$kcm(0x2, 0x3, 0x84) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f11"], 0x4c}, 0x20001850) 43.434359899s ago: executing program 32 (id=130): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x773c1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x7ffe, 0x80) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r1, r0, 0x0, 0xf03a0005) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x80000001, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) 42.086116074s ago: executing program 4 (id=153): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="410d00000000000014000300766c616e3000000000000000000000000a000000000000f0e19ecc515146554792f7d0d9185330292038"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 37.860075053s ago: executing program 4 (id=157): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 34.588289354s ago: executing program 4 (id=160): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4004080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104900000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 29.503517406s ago: executing program 4 (id=169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettaction={0x34, 0x32, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x20000004) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unshare(0x20000400) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ppoll(&(0x7f0000000040)=[{r0, 0xc}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="d7e7932fc02e3eed6065d0824d12ff5e73f4f33fce8faa26d64bcb9a", 0x1c}, {&(0x7f0000000240)="476be14595289e3b6e2160b1f53ce14f062c99969fc2029a13f873d09b22a325a71c94b629beac2c2cc905370ae88a8372c6560d97799c00aa7b54e18a011b92bf73335e501704cbbdb3a187a9", 0x4d}, {&(0x7f00000002c0)="1f596ebe7cf8f132c0cf6a992eb5ee493cb689b4617fe564efdb4591fc045ef78a1f1435c66faa772a784a5728bc5250aad59f256c4c871ca04ce2f79cf6d9c003d4d2a4c671184f5a798a55007af3cdd20e054073c5cf73a3838a77329a2353936373993dd9d3c028f0921480c6f0e62e", 0x71}], 0x3}}], 0x1, 0x0) 22.48149025s ago: executing program 4 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x404, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x28, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 16.38816204s ago: executing program 0 (id=181): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00'}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000018) 13.293637015s ago: executing program 0 (id=185): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 10.931051216s ago: executing program 0 (id=187): unshare(0xa020480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 9.683042826s ago: executing program 2 (id=189): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 8.912786689s ago: executing program 3 (id=191): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.401159711s ago: executing program 0 (id=192): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_GET(r2, 0x0, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 8.269159635s ago: executing program 2 (id=193): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000d72ab677000a4c000000060a0b040000000000000000200004801c00018008000100686f6700100002800a000240776c6bd3540000000900010073797a30000000000900223ee7f602007308000006000000140000001100010000000000000000000000000a00000000922a44ef58290ff6ad27d913a23add98be574bbb078cff7f918785bf9353aacdfa02139deec533e3de67ae98b9c20c5a9b840487fda9f20a69856ae2ecba1f23a7a80febfe7464f23e134b33a7c05454563123f0abf5b9bc3b3486c13a4184e5a4acc87de821d8cb34dcc38130417f27a2620ab104587e20"], 0x74}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x4040140) 7.172116279s ago: executing program 3 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000080008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x830}, 0x810) 6.630453892s ago: executing program 33 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x404, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x28, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 6.554247317s ago: executing program 2 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000083c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 6.081174343s ago: executing program 3 (id=197): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x4000}, 0xfffffffffffffe31) 4.344458785s ago: executing program 3 (id=198): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) getsockname$qrtr(r0, 0x0, &(0x7f0000000140)) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 3.077058965s ago: executing program 0 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x48, r3, 0x101, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x0, 0x3, 0x0, {0x2, 0xc, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x9, 0x5}}]}, 0x48}}, 0x20004800) 2.754483264s ago: executing program 3 (id=200): unshare(0x2c020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4c, 0x0, 0x0) 2.458691462s ago: executing program 2 (id=201): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000640)="f8bd29e1ab8535e6c0c052dec6f89372f862aa76d019834533f8e55c1953ffe0f680316e8acbea7c73157b1ca4708f353d727dfbdcd37ee1c3838a7592abe0394e355f5a0c9c1f4edc0fe5290739280e9eba1d09a176e24ea26b9cb14f3b8e91b8aabb78caf9671c66fa4c87f846bbf8b498197ec85eb5782080d479b6d5d85bf9ea168865ba0542fe47a33e4b46acb1bfb128ce2921458366aafa55383427fad80630a5a21f248cae9def34bcc66bed7a0b2572cb57c27e761ea37db3c36ff2434967e5", 0xc4}, {&(0x7f0000000740)="f8f4da9a1239d67bed657a67c365e243a76eaa7fe1c96236e2", 0x19}, {&(0x7f0000000780)="ebe6962b020d3975a62f3d38678ae1d93a15351bfb7e6218f8289bed2c20b019edd7738b12c9c4e9f22d3ad287671a77244dd2817455cc0f82947e95ed4d985f6879665bdd81c3a0e60c9b75e90dda31f786dc03b3aaa4ae2b5c277cf7709c54316ebb7dda8d3e0fcef57fc94dbd77ab350f2c84c8dfe35131568af2446034aa89c400dffeb0d349863f2dcc9ae800ad9a56b41726ea6835c9e5a1c90532", 0x9e}, {&(0x7f0000000840)="6b595c3b0d0d078529865b9f4e67fc5b1de622368b3876dda86cb3893147ba2355128c367150672134a2c653a917098d0250d0aa29a9762e9ccf1cb0349191a3b707b68352ee7212845d3d149b6d28bdc3222aab5cc2a3fe768384e9e478f83806c943db4d4ce209cc84b193eafb4ecc3695a525b0e740818c1f58fdc2a0af5eca770a2cddf829618734018dd2d68207742851115592768ab9512d5e26bb0fb696e12a55ed952f77ee82fa3c77", 0xad}, {&(0x7f0000000900)="ffc98ca29e820179b1838621a11663b69bb1307dd36fc987cdaa29852d48a41cede4978c7dd19d8b38ef44c10ae75956ba4513458931c2172aeafceba60baa7aa2484613f6962f63d93f0ec31b1a6e386641318a3c6684da3974d60778afe32180e93b1fbf97829a300abfa9d4adc109f83c35fe4570627e16d07a52434f515c9937612ea10e02b65dc2347ffe6490d487696c37a576306e7557c7d0494e0f59016c80d603276729e85db936ffb1f68d77c86528f3ff00ef452334439a0d47225a4b4caa8547a11a3ef37f8a9a1ba1f1ec5b2253c3a01bfd47f80dd309e8137bb58df6814b8076dc24f62644d739bca0048d2146ecefa5af61343e93d98e7f7599da8998ff6d76f8d92565b99b16899ec92bcc9adc142831b7e9ea11037a5179ebb7adafdfeb67f222bad7493546357c8f79f7605166c3cac50a76acdb820ba6293cb9691198b45695bfd74a83067324e0fe26c7d7977d3cff4f281b9d4c11f41569f4dc2feb92e101b56c46a3cde151dcfdc4c85dcf66781af9577d217fe2d0367d0514e297a2b8090915db86edd8165c79351101eb9441e4295c1c7facffe7889f90579fda3f150f3e5df9b88efb7ab35da88de40aad90b043fc079dfc0d13749afff1616adca95bf8ac668b55309c34e681befbed69d5bd054728a2a4a8a341bc064cfd39ceb8cc63a841659a8bca836c10496fbe92fb3a620bc2b2fff77fc32e397d098fee1c32e51d230cd1c6853edcb5d6e5e276437d8bb94fb4e9e2c0346f517d821d95b55010e7acb1b2d81bf0f5e48aa8084def262448a91fb84eaaa4e18a4cf3c7f17c1cf3699d67eb38a1885391a7fe410fa2d990fb4fe83b3973ed6da1c44ad9112ebf8571ca320102ada646e6c74cf9725f8b2b3b998e48e9ce36748a419afb5a9e675ebb61647ad69d154ac28e45a4aecca306f4bbe630687b5fa28d2ca8304f6e81f2ec7836eee56528ba2accbd23b57889e645d5a89baf7b64ee7d682567a5dd9a70edd0b45f060550a9994561c3e8f37ad54aefb6ddb1cad4961423cdfda3c698f185458d3378300caef3abc22da8430f9434f18f74f48d3603431371d6e77a58f4980b73a88d6f4729572c7c0a7e333f6729b83054f420d08b873b1e86fdb536fd15546b55dacf1c56c3151d9e1bddad5ee3f195c52e8ea9e6762f0a1ee571e54d691fe3db585237c527763c997752b15a87422be660d17c11ec9114753ae9c73e49966572d9029fba077dd8730ac818aa977444837aee6553f6c6b3b4eb951a637470e0c4c478472dd5dba85dc620a9dd0a97e3702100dacfb3d427fafb448b7a5078c25a544879856a64c3256c4ebeaa0e8ac448e3facf1c9759b74f04b72ef52ce8a289ed8c7928b7db378cdfbfd7f2ed0f50972f3c8256be7bdc047cf2fd8fb1d1dd8ff40e4309a8160f623f88f0f50e05f18c1a01cf9c0592860142b8826d8dec808befa7ebdf91271e1e6798be55fc360880bc0209471ab89658b3da2cebceb50e61f02907524a8328875cbabb7e25b7f814f91c8b22a2c04eec56e841559f498b208fb1fab930e6ed9d1a20d3f00f1b1fda5b1c81714230062ab5aa37cf7e9314f26b9fae31e8d1738bb8b874818efe8048330d72f1378a9b6e285bd8ff5749271c9f6be349dd9ecf00a312ba620d94282f6e695ad27ac8a399dae213127b71821b12aa536b76b215379cd4d487c939b3fbce42b61b49b43dd5542cd32f74408cc7f68941b6", 0x4d2}], 0x5}}], 0x1, 0x4) 1.631002148s ago: executing program 3 (id=202): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x1, 0x709d2d, 0x25dfdbf9, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "ec9c28e2fd060450"}, 0x3}}, @CGW_CS_XOR={0x8, 0x5, {0xfe, 0xfffffffffffffffa, 0xfffffffffffffff7, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c000280080001"], 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f0000000280)=0x98) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r5) accept4(r4, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80, 0x80800) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x5, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x8, @val=@uprobe_multi={&(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r8, 0x23, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 1.199758214s ago: executing program 2 (id=203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 341.564313ms ago: executing program 0 (id=204): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0xe, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r0) 0s ago: executing program 2 (id=205): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYBLOB="18c9b4d924b19187bd2c16be15144bce5356ecea72b03a120d152face13e6521744b358d3cf0651f7640ff8ca682de0a6363925c6c9789e08f50807aa08f8b3c25da65ee35877a7b0fcdbd4c67251cc664712727d3d37a5fd4a1d4e71ebe824c03703a9bfec2714d3b983ac083c8f92e313a55a9ef56da0a664e60de65584fa3eb52a436db853dc754e9bd4af7c350394ae80c2d00f837a5b57310333243981153dbb0118f43e360d24ad0b65ed00202350ba3b1b4a5d3df077cf317989fa8f717a9cdcf2a37"], 0x50}}, 0x4040844) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) bind$inet6(r3, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 197.074566][ T5560] cgroup: Unknown subsys name 'net' [ 197.205966][ T5560] cgroup: Unknown subsys name 'cpuset' [ 197.223096][ T5560] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 204.427523][ T5560] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 204.838693][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.846152][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.559448][ T5582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.573685][ T5582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.574890][ T5581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.586589][ T5582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.590584][ T5581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.605231][ T5581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.610102][ T5582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.621652][ T5581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.632909][ T5581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.643986][ T5585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.665107][ T4879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.690604][ T5581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.701764][ T5581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.720322][ T4879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.732859][ T4879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.757801][ T5582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.772826][ T5582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.785346][ T5582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.796178][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.796537][ T4879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.814416][ T5582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.820627][ T4879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.842259][ T4879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.846668][ T5582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.870439][ T5581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.715266][ T48] Bluetooth: hci1: command tx timeout [ 211.724069][ T48] Bluetooth: hci0: command tx timeout [ 211.794134][ T48] Bluetooth: hci2: command tx timeout [ 211.953852][ T48] Bluetooth: hci3: command tx timeout [ 211.959864][ T48] Bluetooth: hci4: command tx timeout [ 213.807718][ T5582] Bluetooth: hci0: command tx timeout [ 213.813694][ T48] Bluetooth: hci1: command tx timeout [ 213.875149][ T48] Bluetooth: hci2: command tx timeout [ 214.034193][ T48] Bluetooth: hci4: command tx timeout [ 214.039967][ T5582] Bluetooth: hci3: command tx timeout [ 215.526395][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.537971][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.546144][ T5590] bridge_slave_0: entered allmulticast mode [ 215.557566][ T5590] bridge_slave_0: entered promiscuous mode [ 215.617077][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.628188][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.637907][ T5578] bridge_slave_0: entered allmulticast mode [ 215.649508][ T5578] bridge_slave_0: entered promiscuous mode [ 215.666693][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.674569][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.682251][ T5590] bridge_slave_1: entered allmulticast mode [ 215.698012][ T5590] bridge_slave_1: entered promiscuous mode [ 215.714812][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.722732][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.732997][ T5579] bridge_slave_0: entered allmulticast mode [ 215.744665][ T5579] bridge_slave_0: entered promiscuous mode [ 215.759749][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.769409][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.778122][ T5578] bridge_slave_1: entered allmulticast mode [ 215.789589][ T5578] bridge_slave_1: entered promiscuous mode [ 215.874419][ T48] Bluetooth: hci1: command tx timeout [ 215.880480][ T5582] Bluetooth: hci0: command tx timeout [ 215.955619][ T48] Bluetooth: hci2: command tx timeout [ 215.967597][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.986650][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.006872][ T5579] bridge_slave_1: entered allmulticast mode [ 216.031107][ T5579] bridge_slave_1: entered promiscuous mode [ 216.115182][ T48] Bluetooth: hci4: command tx timeout [ 216.116181][ T5582] Bluetooth: hci3: command tx timeout [ 216.147406][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.199316][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.218275][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.322961][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.425697][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.493958][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.502084][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.510266][ T5580] bridge_slave_0: entered allmulticast mode [ 216.518985][ T5580] bridge_slave_0: entered promiscuous mode [ 216.531177][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.539363][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.547339][ T5588] bridge_slave_0: entered allmulticast mode [ 216.556676][ T5588] bridge_slave_0: entered promiscuous mode [ 216.577302][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.625391][ T5590] team0: Port device team_slave_0 added [ 216.632992][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.641520][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.649412][ T5580] bridge_slave_1: entered allmulticast mode [ 216.658615][ T5580] bridge_slave_1: entered promiscuous mode [ 216.670008][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.677880][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.685866][ T5588] bridge_slave_1: entered allmulticast mode [ 216.695352][ T5588] bridge_slave_1: entered promiscuous mode [ 216.744935][ T5578] team0: Port device team_slave_0 added [ 216.759700][ T5590] team0: Port device team_slave_1 added [ 216.863806][ T5578] team0: Port device team_slave_1 added [ 216.978183][ T5579] team0: Port device team_slave_0 added [ 217.054448][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.073546][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.091031][ T5579] team0: Port device team_slave_1 added [ 217.127330][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.135032][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.161854][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.182806][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.201060][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.241853][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.249628][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.276408][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.291456][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.299431][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.326075][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.428855][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.436530][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.463008][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.557674][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.565417][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.592232][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.647596][ T5580] team0: Port device team_slave_0 added [ 217.676777][ T5588] team0: Port device team_slave_0 added [ 217.687073][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.695487][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.722368][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.749223][ T5580] team0: Port device team_slave_1 added [ 217.763715][ T5588] team0: Port device team_slave_1 added [ 217.953837][ T5582] Bluetooth: hci1: command tx timeout [ 217.959695][ T48] Bluetooth: hci0: command tx timeout [ 218.002983][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.010680][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.037654][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.044021][ T5582] Bluetooth: hci2: command tx timeout [ 218.095175][ T5590] hsr_slave_0: entered promiscuous mode [ 218.104972][ T5590] hsr_slave_1: entered promiscuous mode [ 218.117949][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.125445][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.152144][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.195212][ T5582] Bluetooth: hci3: command tx timeout [ 218.197824][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.205284][ T5582] Bluetooth: hci4: command tx timeout [ 218.210509][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.240267][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.276284][ T5578] hsr_slave_0: entered promiscuous mode [ 218.286229][ T5578] hsr_slave_1: entered promiscuous mode [ 218.295021][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 218.300944][ T5578] Cannot create hsr debugfs directory [ 218.317805][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.325345][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.352098][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.457662][ T5579] hsr_slave_0: entered promiscuous mode [ 218.467288][ T5579] hsr_slave_1: entered promiscuous mode [ 218.476009][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 218.481876][ T5579] Cannot create hsr debugfs directory [ 218.667620][ T5588] hsr_slave_0: entered promiscuous mode [ 218.679139][ T5588] hsr_slave_1: entered promiscuous mode [ 218.688566][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 218.694723][ T5588] Cannot create hsr debugfs directory [ 218.991343][ T5580] hsr_slave_0: entered promiscuous mode [ 219.000639][ T5580] hsr_slave_1: entered promiscuous mode [ 219.009693][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 219.015862][ T5580] Cannot create hsr debugfs directory [ 220.408155][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.443687][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.456510][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.475076][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.505906][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.526824][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.556648][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.577017][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.681672][ T5578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.711677][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.724488][ T5578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.747782][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.759128][ T5578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.782908][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.799006][ T5578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.821079][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.026656][ T5579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.048560][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.082484][ T5579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.107808][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.151814][ T5579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.175697][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.201547][ T5579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.222834][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.473159][ T5588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.501441][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.551765][ T5588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.574882][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.587875][ T5588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.610029][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.674387][ T5588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.696428][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.975367][ T5580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.997583][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.051654][ T5580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.075335][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.087074][ T5580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.108953][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.163240][ T5580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.185416][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.418224][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.438395][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.643114][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.762375][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.822239][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.829918][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.928744][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.951627][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.959278][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.978204][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.985855][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.028509][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.035961][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.218699][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.362581][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.370119][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.478531][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.501451][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.508908][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.693122][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.921369][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.102269][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.110009][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.204685][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.338623][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.346448][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.452677][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.460855][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.626692][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.634606][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.326084][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.802641][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.237606][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.803462][ T5578] veth0_vlan: entered promiscuous mode [ 229.091249][ T5578] veth1_vlan: entered promiscuous mode [ 229.350227][ T5579] veth0_vlan: entered promiscuous mode [ 229.546442][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.579000][ T5579] veth1_vlan: entered promiscuous mode [ 229.698342][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.773506][ T5578] veth0_macvtap: entered promiscuous mode [ 229.853484][ T5578] veth1_macvtap: entered promiscuous mode [ 230.025616][ T5590] veth0_vlan: entered promiscuous mode [ 230.172189][ T5579] veth0_macvtap: entered promiscuous mode [ 230.189496][ T5590] veth1_vlan: entered promiscuous mode [ 230.259566][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.340681][ T5579] veth1_macvtap: entered promiscuous mode [ 230.440820][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.498834][ T5580] veth0_vlan: entered promiscuous mode [ 230.578473][ T1109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.606336][ T1109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.636036][ T5588] veth0_vlan: entered promiscuous mode [ 230.668618][ T1109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.694090][ T1109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.867669][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.885906][ T5580] veth1_vlan: entered promiscuous mode [ 230.941591][ T5588] veth1_vlan: entered promiscuous mode [ 231.151245][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.170471][ T5590] veth0_macvtap: entered promiscuous mode [ 231.287313][ T5590] veth1_macvtap: entered promiscuous mode [ 231.319903][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.335918][ T1109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.408185][ T1109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.428142][ T1109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.683464][ T5580] veth0_macvtap: entered promiscuous mode [ 231.754266][ T5588] veth0_macvtap: entered promiscuous mode [ 231.801435][ T5580] veth1_macvtap: entered promiscuous mode [ 231.913953][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.976933][ T5588] veth1_macvtap: entered promiscuous mode [ 232.065726][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.243871][ T1143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.269603][ T1143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.347327][ T1143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.394295][ T1143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.431317][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.557140][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.699713][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.741707][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.944827][ T1029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.966071][ T1029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.020268][ T1029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.057698][ T1029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.169565][ T1029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.205670][ T1029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.265533][ T1029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.300085][ T1029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.115443][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.153749][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.492154][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.531701][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.069916][ T5578] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 238.698195][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.745382][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.985506][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.011351][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.824167][ T5835] Zero length message leads to an empty skb [ 240.262237][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.314539][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.554129][ T5689] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 240.654313][ T5844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7'. [ 240.671689][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.767796][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.784219][ T5689] usb 4-1: Using ep0 maxpacket: 32 [ 240.853919][ T5689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.900990][ T5689] usb 4-1: config 0 has no interfaces? [ 240.952853][ T5689] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 240.983687][ T5689] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 241.010003][ T5689] usb 4-1: Product: syz [ 241.037375][ T5689] usb 4-1: Manufacturer: syz [ 241.079530][ T5689] usb 4-1: config 0 descriptor?? [ 241.458685][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.492862][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.855005][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.880819][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.141711][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.160878][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.292959][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.301413][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.164498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 244.267688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 244.574109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 244.676523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 244.983850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 245.086348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 245.188782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 245.496207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 245.598521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 245.804500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.346819][ T4901] usb 4-1: USB disconnect, device number 2 [ 252.177990][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 252.231611][ T5874] block nbd0: not configured, cannot reconfigure [ 252.800673][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'. [ 253.540463][ T5886] syzkaller0: entered promiscuous mode [ 253.573247][ T5886] syzkaller0: entered allmulticast mode [ 256.092568][ T5912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30'. [ 256.714998][ T5920] warning: `syz.2.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 257.169447][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 257.363902][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 257.412043][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.436276][ T5928] syzkaller0: entered promiscuous mode [ 257.455856][ T11] usb 2-1: config 0 has no interfaces? [ 257.459173][ T5928] syzkaller0: entered allmulticast mode [ 257.491973][ T11] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 257.524335][ T11] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 257.557504][ T11] usb 2-1: Product: syz [ 257.579615][ T11] usb 2-1: Manufacturer: syz [ 257.619659][ T11] usb 2-1: config 0 descriptor?? [ 259.249204][ T5947] syzkaller0: entered promiscuous mode [ 259.281535][ T5947] syzkaller0: entered allmulticast mode [ 259.348887][ T5949] syzkaller0: entered promiscuous mode [ 259.368938][ T5949] syzkaller0: entered allmulticast mode [ 259.529488][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45'. [ 259.552838][ T5949] tipc: Started in network mode [ 259.597959][ T5949] tipc: Node identity 0e68f34582a9, cluster identity 4711 [ 259.640854][ T5949] tipc: Enabled bearer , priority 0 [ 259.682434][ T5948] tipc: Resetting bearer [ 259.853794][ T5948] tipc: Disabling bearer [ 260.249791][ T11] usb 2-1: USB disconnect, device number 2 [ 261.100468][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 261.135384][ T11] hid (null): report_id 2362177985 is invalid [ 261.155749][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 261.187467][ T11] hid-generic 0005:0006:0004.0001: report_id 2362177985 is invalid [ 261.207109][ T11] hid-generic 0005:0006:0004.0001: item 0 4 1 8 parsing failed [ 261.239599][ T11] hid-generic 0005:0006:0004.0001: probe with driver hid-generic failed with error -22 [ 261.315170][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 262.516573][ T5988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.57'. [ 263.694496][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 263.920503][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 264.004984][ T4901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 264.006203][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.083166][ T11] usb 5-1: config 0 has no interfaces? [ 264.120275][ T11] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 264.168522][ T11] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 264.215465][ T11] usb 5-1: Product: syz [ 264.248673][ T11] usb 5-1: Manufacturer: syz [ 264.252935][ T4901] usb 3-1: config 0 has no interfaces? [ 264.281703][ T4901] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 264.321830][ T11] usb 5-1: config 0 descriptor?? [ 264.363851][ T4901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.493006][ T4901] usb 3-1: config 0 descriptor?? [ 264.806095][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.873114][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.981479][ T4901] usb 3-1: USB disconnect, device number 2 [ 266.286676][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.294941][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.699971][ T55] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.739639][ T55] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.812413][ T55] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.858476][ T55] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.887033][ T4901] usb 5-1: USB disconnect, device number 2 [ 268.926701][ T4901] IPVS: starting estimator thread 0... [ 268.972237][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 269.075597][ T6033] IPVS: using max 192 ests per chain, 9600 per kthread [ 270.027145][ T6044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.78'. [ 270.345625][ T4901] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 270.561762][ T4901] usb 3-1: config 0 has no interfaces? [ 270.602059][ T4901] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 270.695055][ T4901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.752134][ T4901] usb 3-1: config 0 descriptor?? [ 271.080988][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.131391][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.279114][ T5689] usb 3-1: USB disconnect, device number 3 [ 271.379696][ T4901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 271.611959][ T4901] usb 1-1: Using ep0 maxpacket: 32 [ 271.638602][ T4901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.673692][ T4901] usb 1-1: config 0 has no interfaces? [ 271.736312][ T4901] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 271.772941][ T4901] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 271.817437][ T4901] usb 1-1: Product: syz [ 271.841040][ T4901] usb 1-1: Manufacturer: syz [ 271.894456][ T4901] usb 1-1: config 0 descriptor?? [ 272.009182][ T6050] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 274.557381][ T4901] usb 1-1: USB disconnect, device number 2 [ 279.904739][ T4901] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 280.147081][ T4901] usb 2-1: config 0 has no interfaces? [ 280.176210][ T4901] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 280.247895][ T4901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.291221][ T4901] usb 2-1: config 0 descriptor?? [ 280.909605][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.984010][ T4901] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 281.112995][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.225991][ T4901] usb 5-1: Using ep0 maxpacket: 32 [ 281.304982][ T4901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.380838][ T4901] usb 5-1: config 0 has no interfaces? [ 281.478400][ T4901] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 281.532113][ T4901] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 281.610297][ T5689] usb 2-1: USB disconnect, device number 3 [ 281.635715][ T4901] usb 5-1: Product: syz [ 281.710046][ T4901] usb 5-1: Manufacturer: syz [ 281.806354][ T4901] usb 5-1: config 0 descriptor?? [ 282.476141][ T6102] syzkaller0: entered promiscuous mode [ 282.508350][ T6102] syzkaller0: entered allmulticast mode [ 283.860547][ T6124] raw_sendmsg: syz.3.102 forgot to set AF_INET. Fix it! [ 285.138422][ T5685] usb 5-1: USB disconnect, device number 3 [ 287.738085][ T6154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.111'. [ 287.880470][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 288.080774][ T6157] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET) [ 289.848162][ T5689] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 290.103734][ T5689] usb 4-1: config 0 has no interfaces? [ 290.126589][ T5689] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 290.176695][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.227438][ T5689] usb 4-1: config 0 descriptor?? [ 290.527649][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.610712][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.729889][ T5689] usb 4-1: USB disconnect, device number 3 [ 291.663709][ T5685] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 291.914065][ T5685] usb 3-1: Using ep0 maxpacket: 32 [ 291.939987][ T5685] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.025282][ T5685] usb 3-1: config 0 has no interfaces? [ 292.114027][ T5685] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.176515][ T5685] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 292.237453][ T5685] usb 3-1: Product: syz [ 292.254749][ T5685] usb 3-1: Manufacturer: syz [ 292.340852][ T5685] usb 3-1: config 0 descriptor?? [ 294.836564][ T5685] usb 3-1: USB disconnect, device number 4 [ 295.991351][ T6197] netlink: 'syz.4.122': attribute type 4 has an invalid length. [ 296.641390][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 297.247674][ T6205] netlink: 84 bytes leftover after parsing attributes in process `syz.2.125'. [ 304.930401][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 308.964307][ T5685] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 315.507389][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 315.953722][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'. [ 318.381463][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.398448][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.416684][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.450824][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.477249][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.649678][ T6287] vlan0: entered promiscuous mode [ 320.594705][ T48] Bluetooth: hci5: command tx timeout [ 322.681374][ T48] Bluetooth: hci5: command tx timeout [ 324.754973][ T48] Bluetooth: hci5: command tx timeout [ 325.711500][ T6320] tipc: Started in network mode [ 325.754015][ T6320] tipc: Node identity 92045c16d597, cluster identity 4711 [ 325.782745][ T6323] Bluetooth: MGMT ver 1.23 [ 325.837085][ T6320] tipc: Enabled bearer , priority 0 [ 325.917250][ T6324] syzkaller0: entered promiscuous mode [ 326.009757][ T6324] syzkaller0: entered allmulticast mode [ 326.067504][ T6326] sctp: [Deprecated]: syz.3.162 (pid 6326) Use of int in max_burst socket option. [ 326.067504][ T6326] Use struct sctp_assoc_value instead [ 326.549663][ T6320] tipc: Resetting bearer [ 326.666988][ T6319] tipc: Resetting bearer [ 326.826001][ T6319] tipc: Disabling bearer [ 326.834786][ T48] Bluetooth: hci5: command tx timeout [ 326.988876][ T11] tipc: Node number set to 1200839702 [ 327.730627][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.343598][ T11] IPVS: starting estimator thread 0... [ 329.496862][ T6345] IPVS: using max 288 ests per chain, 14400 per kthread [ 335.796406][ T6364] Bluetooth: hci1: command 0x0406 tx timeout [ 335.803734][ T5586] Bluetooth: hci0: command 0x0406 tx timeout [ 335.815988][ T5586] Bluetooth: hci2: command 0x0406 tx timeout [ 335.824696][ T5585] Bluetooth: hci3: command 0x0406 tx timeout [ 339.254363][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 340.147600][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.191741][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.261622][ T6283] bridge_slave_0: entered allmulticast mode [ 340.351500][ T6283] bridge_slave_0: entered promiscuous mode [ 340.460096][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.490292][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.579631][ T6283] bridge_slave_1: entered allmulticast mode [ 340.641356][ T6283] bridge_slave_1: entered promiscuous mode [ 341.398925][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.523750][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.078393][ T6386] netlink: 160 bytes leftover after parsing attributes in process `syz.3.179'. [ 342.147524][ T6386] netlink: 160 bytes leftover after parsing attributes in process `syz.3.179'. [ 342.319887][ T6283] team0: Port device team_slave_0 added [ 342.430510][ T6283] team0: Port device team_slave_1 added [ 342.551979][ T6388] netlink: 120 bytes leftover after parsing attributes in process `syz.3.179'. [ 342.635618][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 342.753087][ T6387] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 342.844213][ T6387] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 342.942360][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.006599][ T6387] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 343.006769][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.151358][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.258194][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.314047][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.463929][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.536242][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 344.612133][ T6283] hsr_slave_0: entered promiscuous mode [ 344.689955][ T6283] hsr_slave_1: entered promiscuous mode [ 344.752034][ T6283] debugfs: 'hsr0' already exists in 'hsr' [ 344.778500][ T6283] Cannot create hsr debugfs directory [ 348.899886][ T5866] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.372075][ T5866] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.700315][ T5866] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.347312][ T5866] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.598740][ T6453] netlink: 72 bytes leftover after parsing attributes in process `syz.2.193'. [ 351.909813][ T6453] tipc: Enabled bearer , priority 10 [ 352.412416][ T5866] bridge_slave_1: left allmulticast mode [ 352.448544][ T5866] bridge_slave_1: left promiscuous mode [ 352.489059][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.637165][ T5866] bridge_slave_0: left allmulticast mode [ 352.672287][ T5866] bridge_slave_0: left promiscuous mode [ 352.702249][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.260533][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.497961][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.568686][ T5866] bond0 (unregistering): Released all slaves [ 355.621038][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.632542][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.647261][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.665825][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.686194][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.668635][ T6283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.866242][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.968362][ T6283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 357.220053][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.591474][ T6283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 357.798160][ T48] Bluetooth: hci3: command tx timeout [ 357.807617][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.834526][ T6283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 357.934059][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.288900][ T5866] hsr_slave_0: left promiscuous mode [ 358.367250][ T5866] hsr_slave_1: left promiscuous mode [ 358.419763][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.516289][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.596848][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.658094][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.856251][ T5866] veth1_macvtap: left promiscuous mode [ 358.881398][ T5866] veth0_macvtap: left promiscuous mode [ 358.910671][ T5866] veth1_vlan: left promiscuous mode [ 358.939889][ T5866] veth0_vlan: left promiscuous mode [ 359.878308][ T48] Bluetooth: hci3: command tx timeout [ 360.029086][ T6498] ===================================================== [ 360.036756][ T6498] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 360.046184][ T6498] mptcp_established_options+0x112f/0x3530 [ 360.052334][ T6498] tcp_established_options+0x312/0xcc0 [ 360.058176][ T6498] __tcp_transmit_skb+0x5dc/0x5fe0 [ 360.063846][ T6498] __tcp_send_ack+0x967/0xad0 [ 360.068893][ T6498] tcp_send_ack+0x3d/0x60 [ 360.074302][ T6498] mptcp_subflow_shutdown+0x164/0x690 [ 360.086564][ T6498] mptcp_check_send_data_fin+0x31b/0x3d0 [ 360.097327][ T6498] __mptcp_close+0x860/0x1360 [ 360.102256][ T6498] mptcp_close+0x42/0x260 [ 360.106918][ T6498] inet_release+0x1ee/0x2a0 [ 360.111551][ T6498] sock_close+0xd6/0x2f0 [ 360.116050][ T6498] __fput+0x60e/0x1010 [ 360.120225][ T6498] ____fput+0x25/0x30 [ 360.124620][ T6498] task_work_run+0x208/0x2b0 [ 360.129479][ T6498] exit_to_user_mode_loop+0x505/0x2420 [ 360.135194][ T6498] __do_fast_syscall_32+0x2dc/0x470 [ 360.140591][ T6498] do_fast_syscall_32+0x37/0x80 [ 360.146928][ T6498] do_SYSENTER_32+0x1f/0x30 [ 360.151707][ T6498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.158397][ T6498] [ 360.160772][ T6498] Local variable opts created at: [ 360.167147][ T6498] __tcp_transmit_skb+0x4d/0x5fe0 [ 360.172577][ T6498] __tcp_send_ack+0x967/0xad0 [ 360.177747][ T6498] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 360.184795][ T6498] CPU: 1 UID: 0 PID: 6498 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT(lazy) [ 360.196540][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.207164][ T6498] ===================================================== [ 360.214384][ T6498] Disabling lock debugging due to kernel taint [ 360.299535][ T6498] Kernel panic - not syncing: kmsan.panic set ... [ 360.306176][ T6498] CPU: 1 UID: 0 PID: 6498 Comm: syz.2.205 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 360.317374][ T6498] Tainted: [B]=BAD_PAGE [ 360.321756][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.332152][ T6498] Call Trace: [ 360.335562][ T6498] [ 360.338705][ T6498] __dump_stack+0x26/0x30 [ 360.343333][ T6498] dump_stack_lvl+0x50/0x1c0 [ 360.348236][ T6498] ? dump_stack+0x12/0x25 [ 360.352881][ T6498] dump_stack+0x1e/0x25 [ 360.357273][ T6498] vpanic+0x7b4/0x1430 [ 360.361700][ T6498] panic+0x15d/0x160 [ 360.365890][ T6498] kmsan_report+0x31a/0x320 [ 360.370742][ T6498] ? __msan_warning+0x1b/0x30 [ 360.375643][ T6498] ? mptcp_established_options+0x112f/0x3530 [ 360.382153][ T6498] ? tcp_established_options+0x312/0xcc0 [ 360.388099][ T6498] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 360.393535][ T6498] ? __tcp_send_ack+0x967/0xad0 [ 360.398657][ T6498] ? tcp_send_ack+0x3d/0x60 [ 360.403422][ T6498] ? mptcp_subflow_shutdown+0x164/0x690 [ 360.409579][ T6498] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 360.415786][ T6498] ? __mptcp_close+0x860/0x1360 [ 360.420892][ T6498] ? mptcp_close+0x42/0x260 [ 360.425597][ T6498] ? inet_release+0x1ee/0x2a0 [ 360.430524][ T6498] ? sock_close+0xd6/0x2f0 [ 360.435134][ T6498] ? __fput+0x60e/0x1010 [ 360.439508][ T6498] ? ____fput+0x25/0x30 [ 360.443868][ T6498] ? task_work_run+0x208/0x2b0 [ 360.448919][ T6498] ? exit_to_user_mode_loop+0x505/0x2420 [ 360.454886][ T6498] ? __do_fast_syscall_32+0x2dc/0x470 [ 360.460391][ T6498] ? do_fast_syscall_32+0x37/0x80 [ 360.465529][ T6498] ? do_SYSENTER_32+0x1f/0x30 [ 360.470349][ T6498] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.477209][ T6498] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.484246][ T6498] ? kmsan_get_metadata+0xf1/0x160 [ 360.489653][ T6498] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 360.495846][ T6498] ? mptcp_established_options+0x61/0x3530 [ 360.501847][ T6498] ? filter_irq_stacks+0x49/0x190 [ 360.507348][ T6498] ? stack_depot_save_flags+0x35/0x790 [ 360.512967][ T6498] ? kmsan_get_metadata+0xf1/0x160 [ 360.518236][ T6498] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 360.524833][ T6498] ? kmsan_get_metadata+0xf1/0x160 [ 360.530211][ T6498] __msan_warning+0x1b/0x30 [ 360.534953][ T6498] mptcp_established_options+0x112f/0x3530 [ 360.541068][ T6498] tcp_established_options+0x312/0xcc0 [ 360.546680][ T6498] __tcp_transmit_skb+0x5dc/0x5fe0 [ 360.551947][ T6498] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 360.558561][ T6498] ? kmsan_get_metadata+0xf1/0x160 [ 360.564044][ T6498] ? kmsan_get_metadata+0xf1/0x160 [ 360.569351][ T6498] ? kmsan_get_metadata+0xf1/0x160 [ 360.574809][ T6498] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 360.580780][ T6498] ? __alloc_skb+0xb7d/0x1190 [ 360.585611][ T6498] __tcp_send_ack+0x967/0xad0 [ 360.590464][ T6498] tcp_send_ack+0x3d/0x60 [ 360.595059][ T6498] mptcp_subflow_shutdown+0x164/0x690 [ 360.600613][ T6498] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 360.606591][ T6498] mptcp_check_send_data_fin+0x31b/0x3d0 [ 360.612570][ T6498] __mptcp_close+0x860/0x1360 [ 360.618142][ T6498] ? __pfx_mptcp_close+0x10/0x10 [ 360.623292][ T6498] mptcp_close+0x42/0x260 [ 360.627787][ T6498] ? __pfx_mptcp_close+0x10/0x10 [ 360.632930][ T6498] inet_release+0x1ee/0x2a0 [ 360.637587][ T6498] ? __pfx_inet_release+0x10/0x10 [ 360.642757][ T6498] sock_close+0xd6/0x2f0 [ 360.647132][ T6498] ? __pfx_sock_close+0x10/0x10 [ 360.652372][ T6498] __fput+0x60e/0x1010 [ 360.656676][ T6498] ? __pfx_____fput+0x10/0x10 [ 360.661519][ T6498] ____fput+0x25/0x30 [ 360.665633][ T6498] task_work_run+0x208/0x2b0 [ 360.670428][ T6498] exit_to_user_mode_loop+0x505/0x2420 [ 360.676062][ T6498] ? __ia32_sys_close_range+0x96/0xe0 [ 360.681683][ T6498] __do_fast_syscall_32+0x2dc/0x470 [ 360.687034][ T6498] do_fast_syscall_32+0x37/0x80 [ 360.692051][ T6498] do_SYSENTER_32+0x1f/0x30 [ 360.696764][ T6498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.703671][ T6498] RIP: 0023:0xf701f01c [ 360.707823][ T6498] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 360.727564][ T6498] RSP: 002b:00000000ff85679c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 360.736203][ T6498] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 360.744270][ T6498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.752493][ T6498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.760733][ T6498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 360.768986][ T6498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.777169][ T6498] [ 360.780848][ T6498] Kernel Offset: disabled [ 360.785250][ T6498] Rebooting in 86400 seconds..